LookalikeGuard

Lookalike domains by industry

We scanned 95 well-known brands in eight industries on October 19 and 20, 2026, and found 32,589 registered lookalike domains. This page breaks those counts down by industry. Every number is counted from the stored scan data; nothing is a survey or an estimate. For the overall numbers, see our lookalike domain research.

IndustryLookalikesPer brand (median)Can receive emailNew HTTPS certificate in the last 24 hLive page (of sites opened)Real fakes found (of flagged sites checked)
Banks and card issuers
12 brands, e.g. Chase, Bank of America, Capital One, HSBC
5,07047632%70%37%1 of 281
Payments and fintech
7 brands, e.g. PayPal, Stripe, Venmo, Klarna
2,74931338%69%52%5 of 207
Crypto exchanges and wallets
13 brands, e.g. Coinbase, Binance, MetaMask, Ledger
4,48929236%65%32%15 of 735
Software and SaaS
21 brands, e.g. Slack, Shopify, DocuSign, Zoom
6,47424535%65%47%9 of 767
Retail and online stores
23 brands, e.g. Nike, Walmart, IKEA, Sephora
7,14925235%64%45%27 of 717
Shipping and delivery
5 brands, e.g. USPS, FedEx, UPS, DHL
1,17811925%58%22%1 of 53
Streaming, gaming, social and travel
12 brands, e.g. Netflix, Roblox, Airbnb, Instagram
5,15335624%62%27%6 of 646
Telecom and internet
2 brands, e.g. Verizon, Xfinity
32716425%45%23%1 of 44

"Can receive email" means a real mail server (MX record), not a registrar's parking host. "Real fakes" are sites we read by hand and found posing as the brand; only sites our scanner flagged as medium or high risk were checked, and how many were checked differs a lot by industry, so compare the fake counts with care.

What stands out

What this means for your business

Whatever you sell, expect lookalikes to exist already, and expect the dangerous ones to use your name spelled correctly with an extra word, not only misspellings. If you run an online store, watch for shop sites using your name. If you take payments or send invoices, watch which lookalikes can send email. In every industry, the useful signal is a newly registered domain or a new certificate containing your brand.

Free, no account needed. A scan takes 15 to 60 seconds. You get a shareable result link.

How we counted

Related guides: combosquatting, lookalikes with mail servers, what to do about a fake domain.

What it does not do

LookalikeGuard is monitoring and early warning. It does not take down domains, send legal notices, or give legal advice. Scores are automated and can be wrong in both directions: a high score is a reason to look, not proof of abuse. Many lookalike domains are parked, owned by unrelated businesses, or registered defensively by the brand itself; you can mark those as yours or dismiss them.