Know when someone registers a domain that imitates yours.
Domains like yourbrand-billing.com or yourbrnad.com are used to send fake invoices and copy login pages. Mimicwatch spots them in public records, tells you which ones matter, and hands you the report to get them taken down.
Get a free check Email us your domain. You get a short report within 2 business days. No card needed.The problem
Registering a domain that looks like yours takes a few minutes and a few euros. Most small companies only hear about it when a customer asks why they got a strange invoice, or a supplier asks why the bank details changed.
Brand-protection services for large companies exist, but they are priced and sold for large companies. Free scanners exist too, but they return long lists of harmless matches and stop there.
How it works
- You send us your domain. Nothing to install, no access to your systems.
- We watch public records. New TLS certificates in certificate transparency logs, plus registered spelling variants of your name checked in public DNS.
- A person checks every hit. We look at whether the domain has a live website or a mail server, what the page shows, and when it appeared. Parked and unrelated domains are filtered out.
- You get an alert only when it matters. Within one business day of us finding it, by email.
- You file the report in minutes. Every alert comes with a takedown pack you can send as is.
What an alert looks like
- Your brand
- northwind.example
- Lookalike
- northwind-invoices.example
- First seen
- TLS certificate issued 3 October, found in the public certificate log
- Risk
- High. Has a mail server and a page that copies your login screen.
- Evidence
- Screenshot of the public page, DNS records, certificate details
- Takedown pack
- Registrar abuse address, hosting abuse address, links to report to Google Safe Browsing and Microsoft, and a pre-written report text with the evidence attached
Pricing
Free check
EUR 0
- One-time list of lookalike domains that exist today
- Which ones have a live website or mail server
- Report within 2 business days
Monitoring
EUR 19 per month, per brand
Or EUR 190 per year (two months free).
- Public records checked every business day
- Each hit reviewed by a person before you hear about it
- Alert with screenshot, risk level and takedown pack
- Cancel any time
IT providers and web agencies: EUR 12 per brand per month from 5 brands, billed to you. Ask about the partner plan.
Questions
Where does the data come from?
Only public sources: certificate transparency logs (for example crt.sh), public DNS and public registration data (RDAP/WHOIS). We may take a screenshot of a page anyone can open. We never log in anywhere, never test or attack a domain, and never contact the people behind it.
Do you take the sites down for me?
No. Registrars and hosts expect the brand owner to report. We prepare everything: who to write to, what to say, and the evidence. Sending it usually takes a few minutes. Our guide to reporting a lookalike domain shows the steps.
Is it real-time?
Not yet. Right now a person reviews each finding, so alerts arrive within one business day of us finding the domain. That keeps false alarms low. We will automate more of the watching as we grow, and we will say so here when it changes.
Will I get flooded with alerts?
No. Parked pages, unrelated businesses with similar names and domains with no website or mail are filtered out. If nothing worth your time turns up, you hear nothing.
What counts as one brand?
One main domain and its name. If you run several shops or brands, each one is a separate brand.
Can you guarantee nobody will imitate us?
No one can. We can make sure you find out early and know what to do about it.
What do you do with my domain and email?
We use them only to run your checks and send your alerts. We do not sell or share them. Details are in the privacy notice.
Start with a free check
Send us the domain you want checked. You get a plain list of what already exists, and what, if anything, needs your attention.
Get a free check