Scam Detective

Already decided? Go straight to payment

Both are one-time payments — no account and no subscription. The free check and the free sweep above stay free; these two links exist for people who already know which one they want.

Free check — no email, no card, no account

Holding a link? Check it before you read on.

Most people arrive holding one link and a bad feeling. Paste it and our server reads it live: whether the name resolves, the certificate served on the connection, its public registration record, and the page itself fetched with caching switched off. You get the answer before we ask you for anything.

A 0–100 scam risk score, a plain-English verdict, from “no red flags found” to “high risk”, and the two most serious red flags — each naming what we read and the day we read it.

Free. No email, no card, no account. Reads the address live — about 40 seconds.

No link to hand? Tap one of these addresses from our published record and watch the same check run on it — what it serves today, not what the record says it served.

Point-in-time check of public information. Not monitoring, not advice. A link that is not in our published record is unchecked, not clean — the record is what we have looked at, nothing more. Nothing runs until you press a button. Each check spends live reads, so we never start one for you on page load.

Questions, corrections, or are you the brand owner? Write to us:scam-detective8@mail.acoco.aiA monitored inbox — answered by a person, usually the same day.
Read a real report first · $29 one-time · no subscription

See the whole report before you pay for yours.

We published one complete $29 Brand Impersonation Audit in full — every hostname it named, every dated reading, the risk ratings and the takedown request. Read it, then run yours.

See a real report before you buy

We published one complete $29 audit in full — SABO Skirt (saboskirt.com), run 20 Sep 2026.

  • 97/100exposure score — high exposure
  • 7confirmed-resolving hostnames, each named
  • 51dated exhibits behind the findings
  • 1takedown request, drafted and ready to send

The real artefact, not a mock-up: every hostname it found, the dated readings and risk ratings, all 51 exhibits and the takedown request — nothing withheld, nothing re-worded. SABO Skirt did not commission it and did not pay for it.

Read the whole report — free
Your brand · free counts first · $29 to reveal

How many lookalikes of your name are answering right now?

Free, no email and no card: we generate the lookalike and typosquat names for your domain, resolve them, fetch the ones that answer and grade them against your own page — then show you the counts, two of the rows in full, and the rest withheld. We generate the lookalike and typosquat names from your domain — different endings, hyphenated forms, single-character swaps and drops, and the shop / store / outlet / sale / official patterns our own documented corpus is full of. Only hostnames we confirm resolving are counted as resolving — a name nobody has registered is counted, never padded into a list.

No email, no card, no account. The sweep runs live and usually takes under a minute.

Know what you need already? The $29 report is right here. The $29 report names every hostname behind these counts, with the dated readings for each, the copying evidence where we found it, a risk rating derived in code, our own published record where we already hold one — and the takedown request drafted for you to send.

  • Lookalike and typosquat candidates generated from your own domain — different endings, hyphenated forms, character swaps, drops and doublings, and the -shop/-outlet/-store/-sale/-official patterns our own documented corpus is full of
  • Every candidate resolved, and everything that resolves fetched live with cache bypassed — only hostnames we confirm resolving are listed, so a name nobody registered is counted rather than padded into your report
  • Per hostname: the date-stamped readings behind it — DNS, the HTTPS certificate served, the public registration record, and the page as served
  • Per hostname: a risk rating derived in code from what was observed, and the copying evidence where we found it — your own hosted files being served, your image filenames, your catalogue handles or part numbers, or your title wording reproduced
  • Where we already publish a dated record for a hostname, our own published finding, quoted verbatim
  • A ready-to-send takedown request with your details in square brackets, plus the dated evidence index it refers to
  • Delivered the moment the reads finish — the checks run live when you pay, so there is no research queue in front of it

What this is not: the Evidence Report is the researched tier — it adds the registrar and the true upstream host per domain, a filing drafted separately for every desk, and research beyond the patterns generated here. The audit is the deterministic sweep of your own name plus live reads, delivered without a research queue.

This is a point-in-time audit of publicly observable information, not legal advice and not monitoring. We assemble the evidence and draft the request; on this tier you send it. We do not file on your behalf, we do not contact the registrant, and no outcome or timeline is promised — that decision belongs to each registrar, host and platform.

Your own scan is free before any of that. Type your brand name and the domain you own: our own code generates the lookalike and typosquat names from it, resolves every one live, fetches the ones that answer and grades them against your own page — then prints, on this page, how many are registered and resolving on today's date, two of the rows in full with the hostname included, and the rest withheld. No email, no card, no account.

  • Candidate names generated deterministically from your own domain — different endings, hyphenated forms, single-character swaps, drops and doublings, and the shop / store / outlet / sale / official patterns our documented corpus is full of
  • Every candidate resolved in DNS, and what answers fetched live with cache bypassed — a name nobody registered is counted, never padded into a list
  • Two of the rows shown in full, free: the hostname, how it was generated from your domain, what it answered when we read it and on what date, and the copying evidence where the grader found any — the remainder withheld and counted exactly
  • Counts from a time-capped free pass, so each one is a floor and not a total — and a lookup that did not complete is counted as inconclusive, never as “does not exist”
  • $29, once, reveals every hostname behind those counts with the dated readings, the copying evidence where we found it, a risk rating derived in code, and a takedown request drafted for you to send — exactly like the published one above
  • A point-in-time audit of publicly observable information. Not monitoring, not legal advice, and we do not file on your behalf

Not a brand owner — just checked out on a site you now doubt? The instant URL check is the shopper's path: paste one link, $2. Two products, two prices, nothing else to choose between.

Our published research — free to read, quote and re-compute

Of 60 lookalike storefront hostnames we document, 19 had the observed state “does not resolve” when we re-checked them on 6 October 2026. The whole dataset is published: every record with its dated decay history, the method as run, the registry status read-back, and a CSV.

Read the dataset
Why the evidence is the hard part

Taking it down isn't the hard part. Filing correctly is.

Registrars and hosts do act on impersonation complaints — but only when the request arrives in the shape they require: the right abuse desk for the party that actually controls the domain, the infringing URL captured as evidence, your own mark and ownership stated plainly, and a specific action requested. Most complaints fail on paperwork, not merit: they go to the wrong host, cite nothing verifiable, or ask for something the provider has no power to do. A registrar abuse desk, a hosting abuse desk and a marketplace report form each demand a different shape, and a request written for one is routinely rejected by another.

The $29 Brand Impersonation Audit hands you the evidence half of that, assembled and dated: every lookalike we confirm resolving named in full, the readings behind each one taken the day you buy — DNS, the certificate served, the public registration record and the page as served — the copying evidence where we found it, a risk rating derived in code, and a takedown request drafted with your details in square brackets alongside the evidence index it refers to. You send it.

This is a point-in-time audit of publicly observable information, not legal advice and not monitoring. We assemble the evidence and draft the request; on this tier you send it. We do not file on your behalf, we do not contact the registrant, and no outcome or timeline is promised — that decision belongs to each registrar, host and platform.

The alternative
$860average

That's the average price of a single attorney-drafted cease-and-desist letter — before anyone has found the domains, captured the evidence, or identified who to send it to.

$29Brand Impersonation Audit, one-time — the evidence and the request, drafted
See a real report before you buy

We published one complete $29 audit in full — SABO Skirt (saboskirt.com), run 20 Sep 2026.

  • 97/100exposure score — high exposure
  • 7confirmed-resolving hostnames, each named
  • 51dated exhibits behind the findings
  • 1takedown request, drafted and ready to send

The real artefact, not a mock-up: every hostname it found, the dated readings and risk ratings, all 51 exhibits and the takedown request — nothing withheld, nothing re-worded. SABO Skirt did not commission it and did not pay for it.

Read the whole report — free
Our research: one kit, ~90 fake .shop stores

We traced 38 clone storefronts copying 36 real brands, all live on 27 July 2026 — the artefacts, the ten-second tell, and what actually gets one removed.

Is your brand already on our list?

Every fake storefront we have documented, indexed by the brand it copies — each with the date we checked it and what it was serving.

What's in the $29 audit

Six things you can act on today.

Every audit is run for your brand specifically — not a template, not a generic watchlist. The checks run live when you pay, so the evidence is dated to the day you bought it, and it is ordered so you know what to chase first. Read the complete published example if you'd rather see it than read about it.

Lookalike domains, verified live

Character swaps, hyphenated variants, alternate TLDs and 'official outlet' additions on your name — found, de-duplicated, then re-fetched with the date and HTTP status recorded. A dead one is reported as dead, not padded into the count.

Asset-level proof

Where a copy serves YOUR own hosted files — your logo asset, your product images, your favicon, straight off your CDN. A reused file means something was taken, not merely imitated. It's the strongest evidence class there is, and we name the exact asset.

The readings, all date-stamped

Per hostname: DNS, the HTTPS certificate served, the public registration record, and the page as served on the day you bought — recorded as what we read, when we read it, so nothing you cite has gone stale.

A risk rating per domain

High, medium or low, with the reasoning. Live store copying your photos ranks above a parked page nobody has switched on yet.

Our own published record, quoted

Where your sweep turns up a hostname we already document, the report quotes our published finding for it verbatim, with its own date — so a desk or a lawyer can hold your report against something published independently of it.

A takedown request, drafted

Not a blank template. The request is written for what we actually read, with your details in square brackets to fill in, and the dated evidence index it refers to attached — you send it. We don't file on your behalf, we don't contact the registrant, and no outcome or timeline is promised.

How it works

From suspicion to a request you can send.

01

Enter your domain

One field, no account, nothing to install — just the domain you legitimately own, so we can tell you apart from the copies. Company name is optional; we derive it from your domain.

02

Read the counts, then the real report

The free sweep prints your own counts. We publish one complete $29 audit in full, so you can read the exact document you'd receive before paying for yours. Two prices on this site — $2 for one link, $29 for your brand — both one-time, no plan, no card kept on file.

03

The checks run when you pay

Every candidate name resolved, everything that answers fetched live with cache bypassed and graded against your own page, each reading date-stamped. No research queue in front of it.

04

Your report opens, request included

It lands on your order page when the reads finish: every hostname named, the dated readings and the copying evidence, a risk rating derived in code, and the takedown request drafted for you to send. You send it — we don't file on your behalf.

Pricing

Two products. Two prices.

Both are one-time payments — no subscription, no plan, no card kept on file, no account to create. Pay for the one you need, when you need it, and read the published $29 report in full before you decide.

For shoppers · one link

Instant URL check

$2one-time

Paste any website URL. Get a 0–100 scam risk score, a plain-English verdict, and up to five red flags — and none if we found none.

  • 0–100 scam risk score with a plain-English verdict
  • Up to 5 red flags, each with the evidence behind it — and none if we found none
  • Domain age, impersonation and fake-store pattern checks
  • Phishing markers and payment red flags
For brand owners · free counts first

Brand Impersonation Audit

$29one-time · report published in full

The deterministic sweep of your own name: lookalike and typosquat candidates generated from your domain, every one resolved, what answers fetched live and graded against your own page.

  • Lookalike and typosquat candidates generated from your own domain — different endings, hyphenated forms, character swaps, drops and doublings, and the -shop/-outlet/-store/-sale/-official patterns our own documented corpus is full of
  • Every candidate resolved, and everything that resolves fetched live with cache bypassed — only hostnames we confirm resolving are listed, so a name nobody registered is counted rather than padded into your report
  • Per hostname: the date-stamped readings behind it — DNS, the HTTPS certificate served, the public registration record, and the page as served
  • Per hostname: a risk rating derived in code from what was observed, and the copying evidence where we found it — your own hosted files being served, your image filenames, your catalogue handles or part numbers, or your title wording reproduced
  • Where we already publish a dated record for a hostname, our own published finding, quoted verbatim
See a real report before you buy

We published one complete $29 audit in full — SABO Skirt (saboskirt.com), run 20 Sep 2026.

  • 97/100exposure score — high exposure
  • 7confirmed-resolving hostnames, each named
  • 51dated exhibits behind the findings
  • 1takedown request, drafted and ready to send

The real artefact, not a mock-up: every hostname it found, the dated readings and risk ratings, all 51 exhibits and the takedown request — nothing withheld, nothing re-worded. SABO Skirt did not commission it and did not pay for it.

Read the whole report — free

Tell us which brand we're defending

Your domain, your brand name and where the report should land — that's the whole intake for the $29 audit. Anything you typed into the free sweep above is already here.

All we need to start.

Use this same address at checkout and your report lands here. No newsletter, and we don't share it.

Free — no email, no card, no account. A live lookup on your domain, on this page in about 40 seconds.

One-time payment, secure card checkout opens right here. Read a complete report first. You send the takedown request — we don't file for you, and no outcome is guaranteed.

Example — not your resultThis is a real check we ran for SABO Skirt — every domain below was resolved and fetched live. Yours looks exactly like this, for your domain.
Free preview · brand exposureSABO Skirt — saboskirt.com
74/ 100
high exposure

Two lookalike domains were serving live pages under this brand's name when we checked.

Exposure signals found · showing 2

Live lookalike: saboskirt.shophigh

Checked 10 Aug 2026: saboskirt.shop resolves to 62.106.90.114 and returned HTTP 200 — it is serving a page today under a name close to yours. What that page contains, and who hosts it, is what the paid report documents.

Live lookalike: saboskirt.storehigh

Checked 10 Aug 2026: saboskirt.store resolves to 92.112.198.223 and returned HTTP 200 — it is serving a page today under a name close to yours. What that page contains, and who hosts it, is what the paid report documents.

Sample lookalike domain · verified live

saboskirt.shophigh risk

Checked 10 Aug 2026: saboskirt.shop resolves to 62.106.90.114 and returned HTTP 200 — it is serving a page today under a name close to yours. What that page contains, and who hosts it, is what the paid report documents.

Live checks we ran just now

saboskirt.shoplive, HTTP 200
saboskirt.storelive, HTTP 200

We checked 24 close variants of saboskirt.com on 10 Aug 2026: 22 do not resolve at all, 0 are registered but not serving a page, 2 answered live. Only the live ones are listed as findings.

1 more domain in the full report

Registrar and upstream host per domain████████
What each copy is serving████████
Takedown request per desk████████

The findings above are free for your domain too. The $29 Brand Impersonation Audit names every hostname behind your own counts, with the dated readings for each, the copying evidence where we found it, a risk rating derived in code, and a takedown request drafted for you to send.

Scope

Exactly what you get — and what you don't.

We'd rather tell you upfront than take your money for something we don't do. One line matters more than the rest: we assemble the evidence and draft the request — you send it. We never promise the outcome, because that decision belongs to each registrar, host and platform, not to us.

What we do

  • One-off, on-demand checks you pay for per use
  • The $29 brand impersonation audit: a deterministic sweep of your own name, run live when you pay, delivered without a research queue
  • Evidence-backed findings, written in plain English and dated to the day we read them
  • A downloadable report you can forward to a bank, platform or your own counsel
  • A takedown request drafted in the shape an abuse desk expects, for you to send
  • The $2 instant URL check: one link, a 0–100 risk score, a plain-English verdict and the red flags behind it
  • Publishing one complete audit in full, so you can read the real deliverable before paying for yours

What we don't do

  • File anything on your behalf, or contact whoever registered a domain
  • Guarantee any removal, or predict how long a desk will take
  • Act as your lawyer — we are not a law firm and this is not legal representation
  • Continuous monitoring, real-time threat feeds, an API or bulk integration
  • Contact the registrant on your behalf, or recover lost funds
Questions

Straight answers.

What does Scam Detective sell, exactly?+

Two things, both one-time. The $2 instant URL check is for a shopper: paste one suspicious link and get a 0–100 scam risk score, a plain-English verdict, up to five red flags, each with the evidence behind it — and none if we found none, and a 3-step "what to do now" list. The $29 Brand Impersonation Audit is for a brand owner: we sweep the lookalike and typosquat names of your own domain, resolve every one, fetch what answers live, and hand you every confirmed hostname with dated readings, copying evidence, a risk rating derived in code and a takedown request drafted for you to send. No subscription, no plan, no account, and no third price.

Can I read a real report before I pay?+

Yes — the whole thing, free. We published one complete $29 audit at /published-audit: SABO Skirt, run on 20 September 2026 by the same paid pipeline, with nothing removed. Every confirmed-resolving hostname is named, every dated exhibit is there, the risk ratings are the ones the code derived, and the takedown request is printed in full. SABO Skirt did not commission it and did not pay for it. On top of that, the sweep at the top of this page runs free on your own domain and prints your own counts before any ask.

Will you file the takedowns for me?+

No. We assemble the evidence and draft the request with your details in square brackets — you send it. We don't file on your behalf, we don't contact whoever registered the domain, we don't recover funds, and we don't do continuous monitoring. If you want those things, the report is written so your own counsel or security team can act on it without redoing the work.

Are you acting as my lawyer?+

No, and we're careful about this. Scam Detective is not a law firm and does not provide legal representation or legal advice. Every report is automated scam intelligence assembled from publicly observable information at the time of the check. Confirm your own trademark position before you send anything, and talk to a lawyer for anything adversarial.

How many lookalike domains will you find?+

It depends on your brand — typically between eight and twenty-five genuine candidates, ordered by risk. Available-but-unregistered lookalikes are flagged separately as defensive-registration items, never dressed up as active copycats, and a domain we find dead is reported as dead rather than padding the count. If your brand genuinely has no live lookalike today, that's what the report says.

What do I get for the $29 audit?+

The audit is the deterministic sweep of your own name, and it is what the free counts at the top of this page are produced by. We generate lookalike and typosquat candidates from your domain — different endings, hyphenated forms, character swaps, drops and doublings, and the shop/store/outlet/sale/official patterns — resolve every one, fetch what answers with cache bypassed, and grade it against your own page. The $29 report names every hostname behind the counts, with the dated readings for each, the copying evidence where we found it, a risk rating derived in code, our own published record where we already hold one, and a takedown request drafted for you to send. It is delivered without a research queue — the checks run live when you pay. It is not monitoring, and you send the request yourself. The published example at /published-audit is exactly this document, start to finish.

Is any of this a subscription?+

No. There are two prices on this site — $2 for an instant URL check and $29 for a brand impersonation audit — and both are one-time payments. No plan, no card kept on file, no minimum, and nothing to cancel. We do not sell continuous monitoring, a real-time feed or an API.

How long does it take?+

The free brand sweep in the hero usually finishes in under a minute — it is a time-capped live pass, so its counts are floors rather than totals. The free Exposure Preview further down takes about 40 seconds; both are live lookups, not cached lookup tables, so they run while you wait. The $29 audit's own checks run when you pay and the report opens on your order page when they finish — the published example took 26 seconds. The $2 URL check is delivered on screen and emailed to you, usually within a few minutes.

Is this legal advice?+

No. Every report is automated scam intelligence based on public information available at the time of the check. Confirm your own trademark position before sending any request, and talk to a lawyer for anything adversarial.

Someone is using your name right now.

Start with the free counts on your own domain — how many lookalike names of yours resolve, and how many of those we graded are serving your own material. $29 reveals the hostnames and the dated evidence behind them.

Count my lookalikes — free

Or read a complete $29 report first — free

Questions? scam-detective8@mail.acoco.ai