Blog

A lookalike domain and a fake site: the customer pays someone else

One character in the address, and an "invoice" letter looks like yours. Domain protection starts at the registrar, not with a banner that says "we never write first".

A fake site no longer has to look broken. They take your text, your colors and a domain that differs by a letter or a zone. A customer from an ad or an old thread follows it and leaves a card or a lead. You learn about it from a call "I paid, where is the order", or you do not learn at all.

You cannot fully ban someone else's registration. You can make the fake more expensive and more visible. A lock at the registrar so the domain is not taken by a DNS change. A second factor on the registrar account. Mail that is not easy to forge as you. A short list of zones you are willing to hold yourself if the brand name is short and often confused.

What to check first

  • Who owns the domain at the registrar and who else can sign in. Often it is a contractor from 2019.
  • Whether transfer and DNS-change locks are on.
  • Whether a nearby domain is already accepting mail "from you".
  • Whether the details on the real site are current. A fake likes to copy a stale page.

Lexora looks at this in a site audit: the registrar, mail, lookalike names if they are already bothering customers. We do not promise to take down someone else's domain "through contacts". If a fake is already collecting payments, we bring in incident response and record what left your real perimeter, so the wrong thing is not "fixed". The basic audit is free for new clients.

Related Lexora services

Did a contractor register the domain?

We will check who owns it now and whether it can be moved without you.