Nepdomeinwacht: domains that look like yours

Scammers register a domain that looks like your company's, set up email on it and send your customers fake invoices or fake emails. Nepdomeinwacht spots such domains as early as possible.

What we check

• Look-alike domains, every day. More than a hundred variants of your name: typos, letters that look alike (0 and o, rn and m), other extensions and names with -login, mijn-, -factuur or -support added. We check in DNS whether they exist.
• New certificates, every 6 hours. Every SSL certificate is recorded in public logs (Certificate Transparency). If a domain with your brand name gets a certificate, we see it. We do this for brand names of 5 characters or more; shorter names cause too much noise.

Reading the risk

For each domain we find, we check whether it can send email (MX), whether there is a website with a login field on it, whether your name appears on it, since when it has been registered and with which registrar. High: can send email, has a login field, uses your name or was just registered and is active. Medium: active, but without those traits. Low: exists, but does nothing (yet) or redirects to your site. For high and medium you get an email.

Yours, ignore or report

If you registered look-alike domains yourself, click Mine and we will never report them again. Domains you have with Netslim are recognised automatically. If a domain is being abused, tick that it is not yours and click Let Netslim report it. We email the registrar's abuse address with the evidence, and you are in cc. A registrar decides for itself. In clear cases of fraud, many registrars take a domain offline within a few days. Also report a phishing site to Google Safe Browsing, and in case of fraud file a police report and notify the Fraudehelpdesk.

Costs

Per domain per month or per year, paid in advance and cancel monthly. You can check for free first on the Nepdomeinwacht page.