Find fake websites and lookalike domains before they catch your customers out.

Fraudsters can register web addresses that look like yours and use them for fake invoices, copied websites and misleading emails. Impostor Watch checks public records for close matches, explains the risk in plain English, and keeps watching for new ones.

Takes a few seconds. No sign-up, no access to your systems, nothing to install.

The problem

A £12 domain can cost you a customer's trust.

Anyone can register a domain that's one letter away from yours in about five minutes. Most businesses only find out when a customer or supplier has already been caught out. Here's what that usually looks like:

The fake invoice

Your bookkeeper gets an email from [email protected] asking to update bank details for a payment. It looks right. It isn't — and the money's gone before anyone notices the extra hyphen.

The copycat website

A near-perfect copy of your site appears at a slightly different address, quietly collecting your customers' logins or card details. To them it looked exactly like doing business with you.

The reputation hit

People who get scammed by someone wearing your name rarely blame the scammer — they remember your brand. Years of goodwill can be undone by a website you didn't even know existed.

How it works

We watch, so you don't have to.

Step 1

Scan

We search public records — new website registrations, the security certificates sites use, and the records that point a web address to a server — for anything that looks like your name: typos, swapped letters, or added words like “support” or “billing”.

Step 2

Monitor

We keep watching around the clock. New lookalike domains appear every day — the whole point is that you don't have to go looking for them, or even think about it.

Step 3

Alert

If something looks risky, you get a short email in plain English: what we found, why it matters, and what (if anything) to do about it. No jargon, and no flood of alerts about things that don't matter.

For the curious: what's under the hood
We watch Certificate Transparency logs in real time — a public, worldwide ledger of almost every new website certificate as it's issued — run daily checks across thousands of spelling variations of your name, and look up the public registration records that show when a web address was set up and roughly where. Every finding is scored and triaged automatically before you hear about it, and we step in by hand on anything serious — so an alert from us means something actually worth reading.
Pricing

Start with a look. Stay for the peace of mind.

A quick check shows what already exists. Monitoring keeps watch afterwards, because new lookalike domains can appear at any time.

Why trust it

Built by people who do this for a living.

Impostor Watch is built by Raine Security, a working cybersecurity consultancy. The same monitoring that runs here is the tooling we use in our own client work.

Findings are scored and triaged automatically for accuracy before anything's flagged as risky, and we review the serious cases ourselves. Software finds the candidates; our tuning and judgement decide what's worth your time. You won't drown in false alarms.

Everything is external and passive. We look at the same public records anyone could — we never need access to your website, email or systems.

Example finding
acme-ltd-billing.com
Registered 2 days ago · website certificate issued · set up to send email
High risk

Why it was flagged — this is the kind of alert we'd send a business like “Acme Ltd”. Someone registered a web address that copies their name, added the word “billing”, and set it up to send email within days — the classic setup for fake invoices. Acme would have heard from us in plain English soon after it appeared — while a fake like this is still being set up, rather than after the damage is done.

Questions

Fair questions, straight answers.

How is this different from the alerts I get from my domain provider?
Whoever you bought your web address through only knows about names bought from them. Lookalikes are almost never registered there — they're bought anywhere in the world, through any of hundreds of different companies that sell web addresses. We watch public records across the whole internet, so it doesn't matter where a copycat was set up.
Do you need access to my website or systems?
No. Everything we do is external, passive monitoring of public records — the same records anyone could look at, if they had the time and the tooling. There's nothing to install, no passwords to share, and no change to your website or email.
What if you don't find anything?
That's a genuinely good outcome — it means nobody is squatting on your name right now. With monitoring we keep watching, so if that changes next week or next year, you'll be the first to know rather than the last — and each summary shows what we checked, so a quiet month reads as reassurance, not silence.
What happens when you do find something?
You get a short email explaining what we found, why it was flagged, and how serious it looks. Often the right response is simply to be aware of it. When something needs action — like reporting a fake site to have it taken offline — we'll point you at the right next step in plain English.
Couldn't I just search for lookalikes myself?
You can search for a few obvious misspellings yourself. The hard part is keeping up with all the small changes fraudsters use: extra words like "billing" or "support", different endings like .com or .co.uk, and letters that look almost the same. We keep checking the likely variations and only alert you when something is worth reading.
Do I need to be technical to use this?
Not at all. Impostor Watch was built specifically for businesses without an IT or security team. Everything you receive from us is written for a business owner, not an engineer — if you can read an email, you can use Impostor Watch.
How do I get help?
Email [email protected] and tell us what you were trying to do, what happened, and any message you saw. A screenshot is useful too, but please do not include passwords or other sensitive information.

Every week you wait, a copycat could be trading on your name.

Check your domain for free in seconds — then let monitoring watch it around the clock, so you never have to think about this again. The one time you'll wish you'd started is the week a fake invoice gets paid.

Prefer we take the first look for you? Tell us your website address and we'll email you what we find. No access to your systems, nothing to install, cancel anytime.

Get set up
Set up Impostor Watch

Which domains should we watch?

Add your main website and any others you own — up to 5, all included.

And your business name?

We guessed it from your domain — tweak it if it's not quite right.

Any email addresses to watch?

We'll check these against known credential leaks and stealer-log dumps. Optional — you can skip this and we'll still search after you sign up.

Where should we send alerts?

Plain-English alerts and your reports go here. Usually a real person's inbox.

One quick confirmation

Because we monitor real assets on your behalf, we need your say-so.

Ready to go

Check the details, add your card, and you're set.

Loading secure payment…
Payments are handled directly by Stripe — your card details never touch our servers.