Is a lookalike domain running a fake store or download site for my brand?

If people buy your hardware, download your drivers or log in to your software, a copied page on a domain that looks like yours can take their money, their password or put unwanted software on their computer. The common versions are a fake store with huge discounts, a fake "driver download centre" and a fake sign-in or antivirus download page. The first step is finding out which lookalikes of your domain already exist and which of them show a live page.

Free, no account needed. A scan takes 15 to 60 seconds. You get a shareable result link.

What our printer, antivirus and electronics scans found

On October 22, 2026 we scanned 12 printer, antivirus and consumer-electronics brands (Epson, Brother, Logitech, Norton, McAfee, Garmin, Roku, Hisense, Panasonic, Xerox, Avast and Kaspersky) with the same scanner you can use above. Counted from the stored scan data:

• 3,652 registered lookalike domains across the 12 brands, a median of 193 per brand (from 121 to 630).
• 9 confirmed fakes among the 565 flagged sites we checked by hand, at 5 of the 12 brands, never more than 3 per brand.
• What the fakes showed: 5 fake stores selling the brand's products at 65 to 70% off, 3 of them built on the same shop template for two different brands, and one copying the brand's real store with a sign-in page; 2 fake driver or software download centres that sent the download to an unrelated file host; 1 antivirus "download and login" page; and 1 "official website" with a made-up address and phone number.
• 8 of the 9 used the brand name spelled correctly, with a word like "shop", "store", "official" or "gear" or an extra letter added, or a different domain ending. Only 1 relied on a misspelling.
• 7 of the 8 fakes with a known registration date were less than a year old, and 3 were under a month old. One was registered the day before our scan and another the same day.
• 44% of the lookalikes had a real mail server set up, and 68% were found because they got a new HTTPS certificate in the previous 24 hours.

We also found several "setup" and "help" sites using these brand names that state in small print that they are independent support companies. We didn't count them as fakes, but customers can easily mistake them for the real brand. A low count of confirmed fakes doesn't mean these brands are safe: 271 of the 565 flagged sites couldn't be confirmed either way (most were blocked, timed out or already gone when we checked). Our scanner rated 7 of the 9 fakes medium or high risk in a standard scan; the other 2 were rated low, which is why we keep improving it and why a person should still look at new lookalikes. More data is on lookalike domains by industry and our 95-brand research.

Signs a lookalike is after your customers

• Your brand name in the domain with a word like "shop", "store", "official", "download", "setup" or "support", or with an extra letter added.
• Your brand name with a different ending, such as .site or a country ending you don't use (see the TLD swap checker).
• Your products, logo or page title on a store you don't run, especially with discounts far below your real prices (see fake online stores using a brand name).
• A "download centre" for your drivers or software whose download button points to another website.
• A recently registered domain or a brand-new HTTPS certificate (see why new domains matter).

Our scan checks these automatically: it compares each live lookalike's title and site icon with your real site, looks up registration age, watches public certificate logs, and checks for a real mail server. It can't buy anything, run a download or test what a form does with what's typed into it, so a site we flag still needs a quick look by a person before you act.

If you find one

1. Save evidence: screenshots of the page and the address.
2. Report it to the domain's registrar and hosting company, and to Google Safe Browsing so browsers start warning visitors.
3. Tell your customers where your products, drivers and software are really sold and downloaded, and which addresses are really yours.

Step-by-step details are in what to do about a fake domain. New lookalikes appear every day; monitoring re-checks daily, watches new certificates around the clock, and emails you when a new lookalike appears or an existing one gets riskier.

What it does not do

LookalikeGuard is monitoring and early warning. It does not take down domains, send legal notices, or give legal advice. Scores are automated and can be wrong in both directions: a high score is a reason to look, not proof of abuse. Many lookalike domains are parked, owned by unrelated businesses, or registered defensively by the brand itself; you can mark those as yours or dismiss them.