Scam Detective
How it works

What a report actually contains.

Two products, both one-time payments, both delivered within minutes. Here's exactly what happens between pasting a link and reading a verdict — and where our job stops.

Instant URL check

$2

Paste any website URL. Get a 0–100 scam risk score, a plain-English verdict, and up to five red flags — and none if we found none.

What you receive

  • 0–100 scam risk score with a plain-English verdict
  • Up to 5 red flags, each with the evidence behind it — and none if we found none
  • Domain age, impersonation and fake-store pattern checks
  • Phishing markers and payment red flags
  • A 3-step "what to do now" list for your situation
  • Downloadable PDF report you can forward or keep

What you give us

  • Website URL — Paste the exact link — from an ad, a text message, an email, or a marketplace listing.
  • Where did you find it? (optional) — Optional, but context sharpens the verdict — how you were contacted and what they asked for.
Run my free check

Brand Impersonation Audit

$29

Enter your company name and the domain you own. We generate every lookalike and typosquat name from it, resolve them, fetch what answers with cache bypassed and grade it against your own page — then name each confirmed hostname with the dated readings behind it.

What you receive

  • Lookalike and typosquat candidates generated from your own domain — different endings, hyphenated forms, character swaps, drops and doublings, and the -shop/-outlet/-store/-sale/-official patterns our own documented corpus is full of
  • Every candidate resolved, and everything that resolves fetched live with cache bypassed — only hostnames we confirm resolving are listed, so a name nobody registered is counted rather than padded into your report
  • Per hostname: the date-stamped readings behind it — DNS, the HTTPS certificate served, the public registration record, and the page as served
  • Per hostname: a risk rating derived in code from what was observed, and the copying evidence where we found it — your own hosted files being served, your image filenames, your catalogue handles or part numbers, or your title wording reproduced
  • Where we already publish a dated record for a hostname, our own published finding, quoted verbatim
  • A ready-to-send takedown request with your details in square brackets, plus the dated evidence index it refers to
  • Delivered the moment the reads finish — the checks run live when you pay, so there is no research queue in front of it

What you give us

  • Company name — Exactly as customers write it.
  • Your real domain — The domain you actually own, so we can tell you apart from the copies.
Get my audit — $29
Method

How we investigate.

01

We read the actual site, not a blocklist

Blocklists only know yesterday's scams, and fresh fake stores are days old. We fetch and read the page itself, then search the wider web for what's publicly known about the domain and the brand it claims to be.

02

We weigh signals, then explain them

Domain age, impersonation markers, fake-store templates, phishing patterns and payment routes each contribute to the 0–100 score. Every flag in your report names what we actually observed, so you can judge it yourself.

03

We say when we can't verify something

If a registration date or an ownership claim can't be confirmed from public information, the report says so rather than dressing a guess up as a fact. A confident wrong answer is worse than an honest gap.

04

We turn it into next moves

A verdict on its own doesn't help much at 11pm when you've just paid someone. Every URL report ends with three specific things to do — the payment route to contact, who to report it to, what to lock down.

Limits

What we don't do.

These aren't features we're about to ship — they're deliberately outside what this service is. If you need them, you need a different kind of provider, and we'd rather say so now.

No continuous monitoring

Every report is a point-in-time check. We don't watch a domain over time or alert you when something changes.

No real-time feeds or API

There's no integration, no bulk endpoint and no data feed. Reports are bought and read one at a time, on this site.

No guaranteed outcome

We never predict a removal or a timeline. Suspending a domain or pulling a listing is the registrar's, host's or platform's decision alone, and anyone who promises you that decision is selling something they do not control. What we sell is the evidence and the request, assembled and dated.

We don't file for you

The $29 Brand Impersonation Audit gives you the evidence and the takedown request, drafted and ready to send. Sending it, and following it up, is yours to do — we do not submit complaints on your behalf and we do not contact whoever registered a domain.

No fund recovery

We can't reverse a payment or retrieve money. Anyone charging you a fee to recover funds is very likely running the second half of the same scam.

No legal representation

Scam Detective is not a law firm. Submitting an abuse complaint under your written authorization is an administrative act, not legal representation, and it creates no attorney-client relationship. Our reports describe what we found; whether something infringes your trademark, and what to do about it, is a question for a lawyer.

Someone copying your brand?

Run the free sweep on your own domain first — no email, no card. Then the $29 audit names every hostname behind those counts, with the dated readings and a takedown request drafted for you to send. We publish one complete report in full, so you can read it before you buy.

Get the audit — $29

Or email scam-detective8@mail.acoco.ai