Fake domain watch
Nepdomeinwacht: zie nepdomeinen voordat je klanten dat doen
Scammers register a domain that looks like yours and use it to send fake invoices to your customers. Every day we check which lookalike domains exist and which new certificates carry your name. If it is dangerous, you hear about it right away.
from € 5,00 per domain per month · € 6.05 incl. VAT
- 24/7 monitored
- 100+ variants per day
- 1 click to report
How fake domain scams work
One letter of difference is enough
Say your company is called Bakkerij Jansen and you send email from bakkerijjansen.nl. A scammer registers bakkerijjanssen.nl, sets up email on it and sends your customers an invoice with a different account number. Nobody sees that extra s. We do.
- bakkerijjanssen.nldoubled letter
- bakkerijjansen-factuur.nlwith an extra word
- bakkerijjansen.comdifferent extension
- bakkerij-jansen.nlwith a hyphen
- bakkerljjansen.nllookalike letter
What we do
Watch, assess, report
Lookalike domains, every day
Typos, letters that look alike (0 and o, rn and m), other extensions and names with -login, my-, -invoice or -support. More than a hundred variants of your name, every day.
New certificates, every 6 hours
Every SSL certificate is recorded in public logs (Certificate Transparency). If a domain with your name gets a certificate, we often see it before the fake site is online.
How dangerous is it?
For each domain we check whether it can send email, whether it has a login field, whether your name appears on it and since when it has existed. From that we derive a high, medium or low risk.
An email right away
For a new domain with medium or high risk, you get an email straight away, with what we saw and what you can do.
Report with one click
We email the domain's registrar with the evidence, and you are in cc. Plus the links to report it to Google Safe Browsing and the Fraudehelpdesk.
Yours? One click
Did you register lookalike domains yourself to keep them away from scammers? Mark them as yours and we will never report them again. Domains you have with us are recognised automatically.
What it costs
Less than one fake invoice
- Lookalike domains every day, new certificates every 6 hours
- Unlimited reports to registrars, with you in cc
- Cancel monthly, paid in advance, no setup
To be honest: we cannot force a registrar to take a domain offline. We do make sure you know quickly, can warn your customers and that the report with evidence reaches the right party.
Questions
Good to know
Does my domain name have to be with Netslim?
No. You can have any domain monitored, wherever it is registered.
Why do I find domains that are mine in the free check?
The check does not know which domains are yours. In your account you mark them as yours once. Domains you have with Netslim are recognised automatically.
My company name is short. Does it still work?
We monitor lookalike domains for every name. We only search certificates from 5 characters. For a shorter name, so many certificates exist with those letters that it only gives noise.
What does a registrar do with a report?
That differs per registrar. For clear phishing or fraud, many registrars take a domain offline within a few days. We include the evidence so they can assess it quickly.
What should I do if customers already received a fake invoice?
Warn your customers that your account number has not changed, file a police report and report it to the Fraudehelpdesk. Have the domain reported to the registrar through your account.
Are my email and domain secured by this?
Nepdomeinwacht looks at other people's domains. For your own domain, SPF, DKIM and DMARC help. They stop anyone from sending email as if it were your address. With Netslim business email, we set these up properly.
