Mimicwatch

Know when someone registers a domain that imitates yours.

Domains like yourbrand-billing.com or yourbrnad.com are used to send fake invoices and copy login pages. Mimicwatch spots them in public records, tells you which ones matter, and hands you the report to get them taken down.

Get a free check Email us your domain. You get a short report within 2 business days. No card needed.

The problem

Registering a domain that looks like yours takes a few minutes and a few euros. Most small companies only hear about it when a customer asks why they got a strange invoice, or a supplier asks why the bank details changed.

Brand-protection services for large companies exist, but they are priced and sold for large companies. Free scanners exist too, but they return long lists of harmless matches and stop there.

How it works

  1. You send us your domain. Nothing to install, no access to your systems.
  2. We watch public records. New TLS certificates in certificate transparency logs, plus registered spelling variants of your name checked in public DNS.
  3. A person checks every hit. We look at whether the domain has a live website or a mail server, what the page shows, and when it appeared. Parked and unrelated domains are filtered out.
  4. You get an alert only when it matters. Within one business day of us finding it, by email.
  5. You file the report in minutes. Every alert comes with a takedown pack you can send as is.

What an alert looks like

Sample alert, fictional domains
Your brand
northwind.example
Lookalike
northwind-invoices.example
First seen
TLS certificate issued 3 October, found in the public certificate log
Risk
High. Has a mail server and a page that copies your login screen.
Evidence
Screenshot of the public page, DNS records, certificate details
Takedown pack
Registrar abuse address, hosting abuse address, links to report to Google Safe Browsing and Microsoft, and a pre-written report text with the evidence attached

Pricing

Free check

EUR 0

  • One-time list of lookalike domains that exist today
  • Which ones have a live website or mail server
  • Report within 2 business days

IT providers and web agencies: EUR 12 per brand per month from 5 brands, billed to you. Ask about the partner plan.

Questions

Where does the data come from?

Only public sources: certificate transparency logs (for example crt.sh), public DNS and public registration data (RDAP/WHOIS). We may take a screenshot of a page anyone can open. We never log in anywhere, never test or attack a domain, and never contact the people behind it.

Do you take the sites down for me?

No. Registrars and hosts expect the brand owner to report. We prepare everything: who to write to, what to say, and the evidence. Sending it usually takes a few minutes. Our guide to reporting a lookalike domain shows the steps.

Is it real-time?

Not yet. Right now a person reviews each finding, so alerts arrive within one business day of us finding the domain. That keeps false alarms low. We will automate more of the watching as we grow, and we will say so here when it changes.

Will I get flooded with alerts?

No. Parked pages, unrelated businesses with similar names and domains with no website or mail are filtered out. If nothing worth your time turns up, you hear nothing.

What counts as one brand?

One main domain and its name. If you run several shops or brands, each one is a separate brand.

Can you guarantee nobody will imitate us?

No one can. We can make sure you find out early and know what to do about it.

What do you do with my domain and email?

We use them only to run your checks and send your alerts. We do not sell or share them. Details are in the privacy notice.

Start with a free check

Send us the domain you want checked. You get a plain list of what already exists, and what, if anything, needs your attention.

Get a free check