Scam Detective
Real report · nothing withheld · free to read

This is the $29 report, in full.

One complete Brand Impersonation Audit for Nomatic (nomatic.com), published with nothing removed: the exposure score, the summary, every documented hostname with its dated evidence and a risk rating derived in code, all 30 exhibits, and the takedown request word for word. No email, no card, no account.

48/100
exposure score — moderate exposure
2
documented hostnames, each named in full
24
dated observations behind them
30
dated exhibits, with the request that cites them
Read the whole reportRun it on my brand — $29

Where every line of this came from

It was assembled from our own published research, not written for this page and not produced by a sweep run today. Every hostname, every observed state, every date and every artefact below is already published free, hostname by hostname, in the corpus of 61 documented hostnames across 57 brands — 653 dated observations in total, the most recent round on 27 October 2026. Every row links back to the page carrying its own full record, so any line here can be held against the source it is quoted from.

What a paid run adds, stated plainly. When you buy the audit, the sweep runs live on your own domain: a deterministic generator produces the lookalike and typosquat candidates for your name, every one is resolved, everything that answers is fetched with caches bypassed and graded against your own page, and the report opens with those counts. This document carries no such counts, because no such run produced it — what it shows is every other section of the report, exactly as it arrives. The artefact produced end to end by the paid pipeline, with its own candidate counts, is published too: read that one here.

The subject did not commission this and has not paid us. Nomatic is one of the brands our corpus documents; the research is our own and is published on the same terms as the rest of it. If you are Nomatic, or any brand named on this page, and you want this taken down or corrected, write to scam-detective8@mail.acoco.ai and we will act on it.

Every reading below was true on the date printed beside it and can change any day. Nothing here is a statement about what any address is serving right now.

The delivered report starts here

It is written to the buyer and we have not re-pointed a sentence of it for this page — so where it says your site or your own domain below, it means nomatic.com.

48
exposure score / 100
Brand Impersonation Audit
Nomatic — nomatic.com
moderate exposure
most recent reading 27 October 2026 · score derived in code from what was observed

Summary

This section covers nomatic.com, the domain Nomatic owns. We hold 2 hostnames documented against it in our own published corpus, carrying 24 dated observations between them, the most recent on 27 October 2026. Every one of them is listed below with the state we observed, the date we observed it, the artefacts we published for it and a risk rating derived in code from the reading alone.

2 were “live, HTTP 200” at their most recent completed check. A hostname's state can change on any day, in either direction — a row in this corpus has already gone dark and come back — so each line below is a record of what was observed on its own date and is not a statement about what that address is serving today.

2 of them reproduce material we matched to Nomatic's own site — its hosted files, its image filenames, its catalogue handles or product codes, or its title wording — and those are the rows to chase first. The artefact sentences are quoted exactly as we published them, and each belongs to the date it was observed.

What happens next is yours to do. This is a point-in-time audit of publicly observable information, not legal advice and not monitoring. We assemble the evidence and draft the request; on this tier you send it. We do not file on your behalf, we do not contact the registrant, and no outcome or timeline is promised — that decision belongs to each registrar, host and platform. We describe what each page serves; we make no assertion about any registrant’s intent or criminality, and nothing here is legal advice. Questions about anything in this report: scam-detective8@mail.acoco.ai.

Hostnames documented against this domain (2)

Ordered by risk. A row rated high is one where the brand's own material was found reproduced on the page while it was serving; a row that resolves without serving, or does not resolve at all, is rated low whatever its history says — the rating is a function of the reading, not of how bad the story sounds.

nomaticstore.comhigh riskretail suffix

Name shape: your name with a retail word after it (nomatic.com → nomaticstore.com) — one of the patterns a sweep of your own domain generates. On 27 October 2026 we fetched nomaticstore.com with cache bypassed and the observed state was “live, HTTP 200” — it was serving when we looked. Evidence class on our own published record: Lookalike storefront — asset-level evidence. What we published for it, word for word, from the last check on which it was serving (27 October 2026): Loads 40 images directly from nomatic.com — the genuine Nomatic’s own domain — including its homepage banner, e.g. nomatic.com/cdn/shop/files/WFA_Homepage_M-1070x900_1.png. Reproduces 3 of Nomatic’s own image filenames, e.g. an-sj1-blk_outsetsoftshelljacket-hoodie_black_nomatic_11, an-rp1-olv_outsetpant_classic_olive_nomatic_04, an-jp1-ccl_outsetjogger_charcoal_nomatic_04. Reproduces 3 of Nomatic’s own product codes: AN-SJ1, AN-RP1, AN-JP1. 11 earlier dated observations are on this record, the oldest “live, HTTP 200” on 13 August 2026. Each is kept with its own date; none is deleted when a later check disagrees with it. Published in full, with its whole history, at https://scam-detective8.acoco.ai/is-nomaticstore-com-legit.

Asset-level proof: Loads 40 images directly from nomatic.com — the genuine Nomatic’s own domain — including its homepage banner, e.g. nomatic.com/cdn/shop/files/WFA_Homepage_M-1070x900_1.png.

The decay history — 11 earlier dated observations
  • 13 August 2026 — live, HTTP 200
  • 2 September 2026 — live, HTTP 200
  • 8 September 2026 — live, HTTP 200
  • 15 September 2026 — live, HTTP 200
  • 22 September 2026 — live, HTTP 200
  • 29 September 2026 — live, HTTP 200
  • 6 October 2026 — live, HTTP 200
  • 13 October 2026 — live, HTTP 200
  • 18 October 2026 — live, HTTP 200
  • 19 October 2026 — live, HTTP 200
  • 20 October 2026 — live, HTTP 200
observed: live, HTTP 200 when checked on 27 October 2026dated observations behind this row: 12evidence class: Lookalike storefront — asset-level evidence

Our published record for this hostname — checked 27 October 2026, and the source every line above is quoted from.

nomatic.shophigh riskother ending

Name shape: the same name on a different ending (nomatic.com → nomatic.shop) — one of the patterns a sweep of your own domain generates. On 27 October 2026 we fetched nomatic.shop with cache bypassed and the observed state was “live, HTTP 200” — it was serving when we looked. Evidence class on our own published record: Lookalike storefront — title & copy match. What we published for it, word for word, from the last check on which it was serving (27 October 2026): Its page title reproduces Nomatic’s own wording: “Shop Travel Luggage, Backpacks and More.” 11 earlier dated observations are on this record, the oldest “live, HTTP 200” on 13 August 2026. Each is kept with its own date; none is deleted when a later check disagrees with it. Published in full, with its whole history, at https://scam-detective8.acoco.ai/is-nomatic-shop-legit.

The decay history — 11 earlier dated observations
  • 13 August 2026 — live, HTTP 200
  • 2 September 2026 — live, HTTP 200
  • 8 September 2026 — live, HTTP 200
  • 15 September 2026 — live, HTTP 200
  • 22 September 2026 — live, HTTP 200
  • 29 September 2026 — live, HTTP 200
  • 6 October 2026 — live, HTTP 200
  • 13 October 2026 — live, HTTP 200
  • 18 October 2026 — live, HTTP 200
  • 19 October 2026 — live, HTTP 200
  • 20 October 2026 — live, HTTP 200
observed: live, HTTP 200 when checked on 27 October 2026dated observations behind this row: 12evidence class: Lookalike storefront — title & copy match

Our published record for this hostname — checked 27 October 2026, and the source every line above is quoted from.

The takedown request, as delivered

Drafted for the brand owner to send. We do not file it, and we name no registrar or host in it — we did not look either up on this tier, and we do not guess.

HOW TO USE THIS: send one copy per desk. The domain's registrar and the hosting provider are two different
recipients and each wants its own request. We do not name either here — we did not look them up, and we do not
guess. The three lookups that find them are published, free, at https://scam-detective8.acoco.ai/someone-cloned-my-store.
Confirm your own trademark position before you send this; we do not advise on it.

---

To: [Abuse desk — registrar, or hosting provider, for the domain named below]
Subject: Trademark impersonation / abuse report — nomaticstore.com

To whom it may concern,

I am [your full name], [your role] at Nomatic, the owner of the brand
"Nomatic" and of the domain nomatic.com. [State your trademark registration
number and jurisdiction here, or the basis of your unregistered rights.]

I am reporting the following domain(s), which impersonate that brand:

  nomaticstore.com
    Observed 27 October 2026 (cache bypassed): live, HTTP 200.
    Evidence: Loads 40 images directly from nomatic.com — the genuine Nomatic’s own domain — including its homepage banner, e.g. nomatic.com/cdn/shop/files/WFA_Homepage_M-1070x900_1.png.
    Evidence: Reproduces 3 of Nomatic’s own image filenames, e.g. an-sj1-blk_outsetsoftshelljacket-hoodie_black_nomatic_11, an-rp1-olv_outsetpant_classic_olive_nomatic_04, an-jp1-ccl_outsetjogger_charcoal_nomatic_04.
    Evidence: Reproduces 3 of Nomatic’s own product codes: AN-SJ1, AN-RP1, AN-JP1.
    Independently documented: https://scam-detective8.acoco.ai/is-nomaticstore-com-legit (checked 27 October 2026).

  nomatic.shop
    Observed 27 October 2026 (cache bypassed): live, HTTP 200.
    Evidence: Its page title reproduces Nomatic’s own wording: “Shop Travel Luggage, Backpacks and More.”
    Independently documented: https://scam-detective8.acoco.ai/is-nomatic-shop-legit (checked 27 October 2026).

The use of our brand at these addresses is not authorised by us and is likely to mislead our customers into
believing they are dealing with us.

I request that you take the action available to you under your own abuse policy — suspension of the domain, or
removal of the infringing content — and confirm in writing what action you have taken and when.

I have a good-faith belief that the use described above is not authorised by the trademark owner, its agent or
the law, and the information in this notice is accurate to the best of my knowledge.

[Your name]
[Your role], Nomatic
[Your email] · [Your telephone]
[nomatic.com]

---

Attachments to include: the exhibit list from your audit (each row carries the date it was observed), and a
screenshot or saved copy of each page you are reporting, taken by you at the time of sending.

Evidence index (30 dated exhibits)

One row per reading that actually happened, each with the date it was taken and what it supports. This is the list the request above tells the sender to attach.

RefHostnameWhat we readRead on
A1nomaticstore.comour own cache-bypassed check of this hostname — live, HTTP 200Supports: That we observed this hostname in that state on the date stated.2026-10-27
A1.1nomaticstore.comLoads 40 images directly from nomatic.com — the genuine Nomatic’s own domain — including its homepage banner, e.g. nomatic.com/cdn/shop/files/WFA_Homepage_M-1070x900_1.png.Supports: That this page reproduced the brand's own material, read off its own markup on the last date we observed it serving.2026-10-27
A1.2nomaticstore.comReproduces 3 of Nomatic’s own image filenames, e.g. an-sj1-blk_outsetsoftshelljacket-hoodie_black_nomatic_11, an-rp1-olv_outsetpant_classic_olive_nomatic_04, an-jp1-ccl_outsetjogger_charcoal_nomatic_04.Supports: That this page reproduced the brand's own material, read off its own markup on the last date we observed it serving.2026-10-27
A1.3nomaticstore.comReproduces 3 of Nomatic’s own product codes: AN-SJ1, AN-RP1, AN-JP1.Supports: That this page reproduced the brand's own material, read off its own markup on the last date we observed it serving.2026-10-27
A1.h1nomaticstore.coman earlier check of the same hostname — live, HTTP 200Supports: A superseded observation, kept with its own date rather than deleted.2026-08-13
A1.h2nomaticstore.coman earlier check of the same hostname — live, HTTP 200Supports: A superseded observation, kept with its own date rather than deleted.2026-09-02
A1.h3nomaticstore.coman earlier check of the same hostname — live, HTTP 200Supports: A superseded observation, kept with its own date rather than deleted.2026-09-08
A1.h4nomaticstore.coman earlier check of the same hostname — live, HTTP 200Supports: A superseded observation, kept with its own date rather than deleted.2026-09-15
A1.h5nomaticstore.coman earlier check of the same hostname — live, HTTP 200Supports: A superseded observation, kept with its own date rather than deleted.2026-09-22
A1.h6nomaticstore.coman earlier check of the same hostname — live, HTTP 200Supports: A superseded observation, kept with its own date rather than deleted.2026-09-29
A1.h7nomaticstore.coman earlier check of the same hostname — live, HTTP 200Supports: A superseded observation, kept with its own date rather than deleted.2026-10-06
A1.h8nomaticstore.coman earlier check of the same hostname — live, HTTP 200Supports: A superseded observation, kept with its own date rather than deleted.2026-10-13
A1.h9nomaticstore.coman earlier check of the same hostname — live, HTTP 200Supports: A superseded observation, kept with its own date rather than deleted.2026-10-18
A1.h10nomaticstore.coman earlier check of the same hostname — live, HTTP 200Supports: A superseded observation, kept with its own date rather than deleted.2026-10-19
A1.h11nomaticstore.coman earlier check of the same hostname — live, HTTP 200Supports: A superseded observation, kept with its own date rather than deleted.2026-10-20
A1.rnomaticstore.comour own published record for this hostname, with its full dated history: https://scam-detective8.acoco.ai/is-nomaticstore-com-legitSupports: That every line of this row is published independently of this document, and can be checked against it.—
A2nomatic.shopour own cache-bypassed check of this hostname — live, HTTP 200Supports: That we observed this hostname in that state on the date stated.2026-10-27
A2.1nomatic.shopIts page title reproduces Nomatic’s own wording: “Shop Travel Luggage, Backpacks and More.”Supports: That this page reproduced the brand's own material, read off its own markup on the last date we observed it serving.2026-10-27
A2.h1nomatic.shopan earlier check of the same hostname — live, HTTP 200Supports: A superseded observation, kept with its own date rather than deleted.2026-08-13
A2.h2nomatic.shopan earlier check of the same hostname — live, HTTP 200Supports: A superseded observation, kept with its own date rather than deleted.2026-09-02
A2.h3nomatic.shopan earlier check of the same hostname — live, HTTP 200Supports: A superseded observation, kept with its own date rather than deleted.2026-09-08
A2.h4nomatic.shopan earlier check of the same hostname — live, HTTP 200Supports: A superseded observation, kept with its own date rather than deleted.2026-09-15
A2.h5nomatic.shopan earlier check of the same hostname — live, HTTP 200Supports: A superseded observation, kept with its own date rather than deleted.2026-09-22
A2.h6nomatic.shopan earlier check of the same hostname — live, HTTP 200Supports: A superseded observation, kept with its own date rather than deleted.2026-09-29
A2.h7nomatic.shopan earlier check of the same hostname — live, HTTP 200Supports: A superseded observation, kept with its own date rather than deleted.2026-10-06
A2.h8nomatic.shopan earlier check of the same hostname — live, HTTP 200Supports: A superseded observation, kept with its own date rather than deleted.2026-10-13
A2.h9nomatic.shopan earlier check of the same hostname — live, HTTP 200Supports: A superseded observation, kept with its own date rather than deleted.2026-10-18
A2.h10nomatic.shopan earlier check of the same hostname — live, HTTP 200Supports: A superseded observation, kept with its own date rather than deleted.2026-10-19
A2.h11nomatic.shopan earlier check of the same hostname — live, HTTP 200Supports: A superseded observation, kept with its own date rather than deleted.2026-10-20
A2.rnomatic.shopour own published record for this hostname, with its full dated history: https://scam-detective8.acoco.ai/is-nomatic-shop-legitSupports: That every line of this row is published independently of this document, and can be checked against it.—

Scope, stated on the document itself

Every reading in this document was taken on the date printed beside it, the most recent of them on 27 October 2026, and each is published independently on its own page. It is a point-in-time record, not monitoring, and not legal advice. This is a point-in-time audit of publicly observable information, not legal advice and not monitoring. We assemble the evidence and draft the request; on this tier you send it. We do not file on your behalf, we do not contact the registrant, and no outcome or timeline is promised — that decision belongs to each registrar, host and platform. We name no registrar, hosting provider, network or certificate authority, and we make no assertion about anyone's identity or intent. A hostname's state can change at any time after the date beside it.

These are not sentences written for this page. They are the scope limits from our own claims register, reproduced word for word, and they bind every surface of this site — including the one you are reading.

  • Every report is a point-in-time audit of publicly observable information, dated to the day the reads were taken. A hostname's state can change at any time after that date.
  • No continuous monitoring, on any tier. There is no real-time feed, no API and no alerting, and nothing is re-checked after the report is delivered.
  • No takedown execution, on any tier: we never file. We assemble the evidence and draft the request; the buyer sends it.
  • We never contact the registrant, and we do not contact a registrar, host or platform on a customer's behalf.
  • No outcome and no timeline is promised. Whether anything is suspended is the registrar's, host's or platform's decision alone.
  • No legal representation, ever. This is the boundary that did NOT move and must never be softened. We are not a law firm.
  • No fund recovery.
  • No legal proceedings, and no advice on the merits of a trademark position.
  • We make no assertion about any registrant's intent or criminality

Quoted from growth/approved-claims.md §13b, with no word added, removed or softened. The line that travels with this product on every surface that sells it: This is a point-in-time audit of publicly observable information, not legal advice and not monitoring. We assemble the evidence and draft the request; on this tier you send it. We do not file on your behalf, we do not contact the registrant, and no outcome or timeline is promised — that decision belongs to each registrar, host and platform.

Run the same report on your own domain

The counts are free — put in your company name and the domain you own and the sweep runs here, with no email and no card. $29, once, turns those counts into the document you have just read: every hostname, the dated readings, the copying evidence where we find it, a rating derived in code, and the request drafted with your details in square brackets.

Your brand · free counts first · $29 to reveal

How many lookalikes of your name are answering right now?

Free, no email and no card: we generate the lookalike and typosquat names for your domain, resolve them, fetch the ones that answer and grade them against your own page — then show you the counts, two of the rows in full, and the rest withheld. We generate the lookalike and typosquat names from your domain — different endings, hyphenated forms, single-character swaps and drops, and the shop / store / outlet / sale / official patterns our own documented corpus is full of. Only hostnames we confirm resolving are counted as resolving — a name nobody has registered is counted, never padded into a list.

No email, no card, no account. The sweep runs live and usually takes under a minute.

Know what you need already? The $29 report is right here. The $29 report names every hostname behind these counts, with the dated readings for each, the copying evidence where we found it, a risk rating derived in code, our own published record where we already hold one — and the takedown request drafted for you to send.

  • Lookalike and typosquat candidates generated from your own domain — different endings, hyphenated forms, character swaps, drops and doublings, and the -shop/-outlet/-store/-sale/-official patterns our own documented corpus is full of
  • Every candidate resolved, and everything that resolves fetched live with cache bypassed — only hostnames we confirm resolving are listed, so a name nobody registered is counted rather than padded into your report
  • Per hostname: the date-stamped readings behind it — DNS, the HTTPS certificate served, the public registration record, and the page as served
  • Per hostname: a risk rating derived in code from what was observed, and the copying evidence where we found it — your own hosted files being served, your image filenames, your catalogue handles or part numbers, or your title wording reproduced
  • Where we already publish a dated record for a hostname, our own published finding, quoted verbatim
  • A ready-to-send takedown request with your details in square brackets, plus the dated evidence index it refers to
  • Delivered the moment the reads finish — the checks run live when you pay, so there is no research queue in front of it

What this is not: the Evidence Report is the researched tier — it adds the registrar and the true upstream host per domain, a filing drafted separately for every desk, and research beyond the patterns generated here. The audit is the deterministic sweep of your own name plus live reads, delivered without a research queue.

This is a point-in-time audit of publicly observable information, not legal advice and not monitoring. We assemble the evidence and draft the request; on this tier you send it. We do not file on your behalf, we do not contact the registrant, and no outcome or timeline is promised — that decision belongs to each registrar, host and platform.

More than one domain to defend? The Portfolio Impersonation Audit is this same report, once per domain, in one dated file for $249. That one is published in full too.

This is a point-in-time audit of publicly observable information, not legal advice and not monitoring. We assemble the evidence and draft the request; on this tier you send it. We do not file on your behalf, we do not contact the registrant, and no outcome or timeline is promised — that decision belongs to each registrar, host and platform.

Every finding here is an assessment of publicly available information at the time of the check, and is not legal advice. We produce the evidence and the correctly addressed request, and we never file: on every tier the buyer sends it. We do not monitor continuously and never contact the registrant on a customer’s behalf, and no outcome or timeline is guaranteed. Confirm your own trademark position before sending anything adversarial.

Who we are, and exactly how we verify a copy: about Scam Detective.