Is a lookalike domain posing as my ticket, booking or support site?

If customers buy tickets, book stays or log in to an account with you, a copied page on a domain that looks like yours can take their money or their password. The common versions are a fake ticket sign-in, a booking page that leads to a payment request, and a fake "support" page saying the account needs to be restored. The first step is finding out which lookalikes of your domain already exist and which of them show a live page.

Free, no account needed. A scan takes 15 to 60 seconds. You get a shareable result link.

What our ticketing, travel, streaming and gaming scans found

In October 2026 we scanned 12 consumer brands across streaming, gaming, social, travel and ticketing (for example Netflix, Airbnb, Booking.com, Uber, Roblox and Ticketmaster) with the same scanner you can use above. Counted from the stored scan data:

• 5,153 registered lookalike domains across the 12 brands, a median of 356 per brand.
• 6 confirmed fakes among the 646 flagged sites we checked by hand, at 4 of the 12 brands, never more than 2 per brand.
• What the fakes showed: 2 ticketing pages (a sign-in page asking for an email and password "to view and accept" tickets, and a fake event ticket page for one country), 2 support pages (an "unusual activity, enter your credentials to restore access" page with a password box, and a copy of a help center), 1 "loading your next stay" booking page, and 1 full copy of a brand's website.
• All 6 used the brand name spelled correctly, with extra letters or a word such as "support" or "help" added, or the real address with another country ending tacked on. None relied on a misspelling.
• All 6 fake domains were less than a year old. One was registered the day before our scan and another the same day.
• 24% of the lookalikes had a real mail server set up, and 62% were found because they got a new HTTPS certificate in the previous 24 hours.

A low count of confirmed fakes doesn't mean these brands are safe: 381 of the 646 flagged sites couldn't be read when we checked them (blocked, timed out or already gone), so we couldn't confirm or rule them out. Ticket and booking scams often run only around a popular event or season, which is why daily re-checks matter more than a one-time scan. The full breakdown, method and limits are on lookalike domains by industry and our 95-brand research.

Signs a lookalike is after your customers

• Your brand name in the domain with a word like "support", "help", "tickets", "booking" or "login", or with extra letters in front.
• Your real address with another ending added after it, or a different ending altogether (see the TLD swap checker).
• Your page title or site icon on a page you don't run, especially a sign-in page, a ticket page or a "restore your account" message.
• A recently registered domain or a brand-new HTTPS certificate, often timed to an event or sale (see why new domains matter).
• A working mail server, so it can send ticket, booking or "account locked" emails under a name that looks like yours.

Our scan checks these automatically: it compares each live lookalike's title and site icon with your real site, looks up registration age, watches public certificate logs, and checks for a real mail server. It can't log in, buy a ticket or test what a form does with what's typed into it, so a site we flag still needs a quick look by a person before you act.

If you find one

1. Save evidence: screenshots of the page and the address.
2. Report it to the domain's registrar and hosting company, and to Google Safe Browsing so browsers start warning visitors.
3. Tell your customers which addresses are really yours, where tickets and bookings are really sold, and that support will never ask for their password.

Step-by-step details are in what to do about a fake domain. New lookalikes appear every day; monitoring re-checks daily, watches new certificates around the clock, and emails you when a new lookalike appears or an existing one gets riskier.

What it does not do

LookalikeGuard is monitoring and early warning. It does not take down domains, send legal notices, or give legal advice. Scores are automated and can be wrong in both directions: a high score is a reason to look, not proof of abuse. Many lookalike domains are parked, owned by unrelated businesses, or registered defensively by the brand itself; you can mark those as yours or dismiss them.