Scam Detective
Documented Evidence Dossier · $149 one-time

A file about your domain, complete enough to hand to someone else

One brand, documented as far as the sweep reaches: every lookalike and typosquat hostname we confirm resolving on your own domain, written out with the dated readings behind it, a risk rating derived in code, the copying evidence where we found any, a dated evidence index, and the takedown request drafted for you to send.

Read a complete report before you pay anything

We published one complete $29 Brand Impersonation Audit in full, with nothing removed: Chamberlain Coffee (chamberlaincoffee.com), run on 12 Oct 2026 by the same pipeline a paid order runs through. It scored 38/100 exposure — moderate exposure — and names all 5 confirmed-resolving hostnames it found, each with the readings taken on the day of the run, 25 dated exhibits behind the findings, the risk ratings the code derived, and the takedown request printed in full. Chamberlain Coffee did not commission it and did not pay for it.

See a real report before you buy

We published one complete $29 audit in full — Chamberlain Coffee (chamberlaincoffee.com), run 12 Oct 2026.

  • 38/100exposure score — moderate exposure
  • 5confirmed-resolving hostnames, each named
  • 25dated exhibits behind the findings
  • 1takedown request, drafted and ready to send

The real artefact, not a mock-up: every hostname it found, the dated readings and risk ratings, all 25 exhibits and the takedown request — nothing withheld, nothing re-worded. Chamberlain Coffee did not commission it and did not pay for it.

Read the whole report — free

That document is one domain’s $29 audit. The Documented Evidence Dossier is the same document on one domain, produced by the same code with the caps raised — read the published audit in full.

One domain you own. $149, once.

The sweep runs live when you pay — there is no research queue in front of it — and the file lands on your order page and in your inbox when the reads finish. No subscription, no account, nothing kept on file.

The subject carried in from the page you came from: littlesleepies.com — littlesleepies.com. It is already in the card form, and it is editable there — the subject must be a domain you own.

Document littlesleepies.com — $149

The subject is a domain you own, never a lookalike you are worried about: we generate names resembling whatever is in that field, so somebody else's address would produce a file about somebody else's name.

What the extra depth actually buys

Same engine, same method, same claims — run deeper. The Brand Impersonation Audit documents up to 15 confirmed hostnames and reports the rest of what resolved as a count; the Documented Evidence Dossier documents up to 30 of them row by row, from a candidate list of up to 320 names rather than 180. Nothing is added to a row and no caveat is softened. If a capped pass over your own domain answers your question, buy the $29 audit instead — this tier is for a file complete enough to hand to someone else.

Candidate names generated from your domain and resolved$29 audit: up to 180$149 dossier: up to 320
Resolving names fetched live, cache bypassed$29 audit: up to 36$149 dossier: up to 72
Confirmed hostnames documented row by row$29 audit: up to 15, the rest reported as a count$149 dossier: up to 30, each with its own readings

Those are caps we can hold inside one run, not a promise about how many names exist. Only hostnames we confirm resolving are documented; a name nobody registered is counted, never padded into your file.

What arrives when the reads finish

  • The deep pass of the same deterministic generator: up to 320 lookalike and typosquat names built from your own domain — different endings, hyphenated forms, character swaps, drops and doublings, and the -shop/-outlet/-store/-sale/-official patterns our own documented corpus is full of — against the 180 the $29 audit resolves
  • Every one of those names resolved, and up to 72 of the ones that answer fetched live with cache bypassed — only hostnames we confirm resolving are listed, so a name nobody registered is counted rather than padded into your file
  • Up to 30 confirmed hostnames documented row by row, against 15 on the $29 audit — which is the whole difference: the resolving remainder that pass reports as a number is written out here with the readings behind it
  • Per hostname: the date-stamped readings themselves — DNS, the HTTPS certificate served, the public registration record, and the page as served — each carrying the day we read it, never an undated assertion
  • Per hostname: a risk rating derived in code from what was observed, and the copying evidence where the grader found any — your own hosted files being served, your image filenames, your catalogue handles or part numbers, or your title wording reproduced
  • Where we already publish a dated record for a hostname, our own published finding quoted verbatim, with a link to it
  • A dated evidence index keyed to the hostnames, so a colleague, a platform desk or your counsel can follow what was observed without redoing the reads
  • A ready-to-send takedown request with your details in square brackets, pointing at the three published lookups that find the right desk — on this tier you send it, we do not file for you
  • Delivered the moment the reads finish — the sweep runs live when you pay, so there is no research queue in front of it

The same method we publish our own research with

This is not a tier with its own engine. The reads, the grader and the risk function are the ones behind the record we publish free: in the re-verification round of 27 October 2026 we held 61 documented lookalike hostnames across 57 brands, carrying 653 dated observations between them — every row with the date it was read, and the full method and a CSV beside it.

Read the open dataset — round of 27 October 2026, or run the free sweep on your own domain first — counts only, no email, no card.

The scope, in our own register’s words

These are not sentences written for this page. They are the scope limits from our own claims register, reproduced word for word, and they bind every surface of this site — including the one you are reading.

  • Every report is a point-in-time audit of publicly observable information, dated to the day the reads were taken. A hostname's state can change at any time after that date.
  • No continuous monitoring, on any tier. There is no real-time feed, no API and no alerting, and nothing is re-checked after the report is delivered.
  • No takedown execution, on any tier: we never file. We assemble the evidence and draft the request; the buyer sends it.
  • We never contact the registrant, and we do not contact a registrar, host or platform on a customer's behalf.
  • No outcome and no timeline is promised. Whether anything is suspended is the registrar's, host's or platform's decision alone.
  • No legal representation, ever. This is the boundary that did NOT move and must never be softened. We are not a law firm.
  • No fund recovery.
  • No legal proceedings, and no advice on the merits of a trademark position.
  • We make no assertion about any registrant's intent or criminality

Quoted from growth/approved-claims.md §13b, with no word added, removed or softened — and it binds this page as much as any other surface here.

It is not monitoring and there is no alerting afterwards, we do not file anything or contact anyone on your behalf, no outcome is promised, and none of it is legal advice. If what you need is somebody to file, this is not that product and we will say so rather than sell you this one.

We describe what each page serves; we make no assertion about any registrant’s intent or criminality, and nothing here is legal advice.

If this is the wrong size

One domain, and a capped pass answers your question? Buy the $29 Brand Impersonation Audit instead. Several brands, storefronts or country domains? The Portfolio Impersonation Audit runs the $29 audit once per domain across up to 10 of them for $249, in one combined dated report. A question before you pay? Write to scam-detective8@mail.acoco.ai — a person reads it.

Questions, corrections, or are you the brand owner? Write to us:scam-detective8@mail.acoco.aiA monitored inbox — answered by a person, usually the same day.