Someone Is Registering Your Brand Name Right Now — Here's How to Catch Them

Last year a client of mine lost six weeks of leads before anyone noticed. A competitor had registered a typosquatted version of their domain — one transposed letter — and was quietly intercepting contact form traffic through a near-identical clone site. The original domain had a DA of 51 and years of trust built into it. The fake had none of that, but it didn't need to. It just needed to be close enough.

That is the uncomfortable reality of brand monitoring for domains. The threat isn't always a sophisticated attack. Sometimes it's a bored opportunist who registered your brand name with a different TLD at 2 a.m. for twelve dollars. The damage accumulates slowly — confused customers, diluted search presence, the occasional phishing complaint that lands in your inbox months later.

What "lookalike" actually means in practice

People tend to imagine lookalike registrations as obvious fakes. They're not. The most dangerous ones are subtle: a hyphen added between two words in your brand name, a .net where you own .com, a plural where you're singular. I've seen "techflow" targeted with "tech-flow.com", "techflows.com", and "techflowapp.io" within the same month — all registered by different parties, none of them with any obvious malicious intent initially, but all of them real liability.

Then there's the category that looks completely clean on the surface but has a history worth knowing about — aged domains that share your brand terms and have backlinks, Wayback records, even some residual organic traffic. Those are the ones that can genuinely confuse Google about who the authoritative source is.

The passive approach fails every time

Most brand owners do nothing until something breaks. They Google their brand name occasionally, maybe set up a Google Alert. That catches maybe 20% of the problem. Google Alerts won't surface a newly registered domain that has no indexed content yet. And by the time a lookalike has indexed content, it's already been live for weeks.

A common misconception is that registering your brand across "the important TLDs" is sufficient protection. It isn't. There are over 1,500 active generic and country-code TLDs. Nobody registers all of them. What you actually need is domain watch infrastructure — automated alerts when registrations matching your brand pattern appear in new zone files.

Tools worth actually using

A few services do this well. DomainTools has had brand monitoring built into its platform for years — their Brand Monitor product watches new registrations against your defined terms and alerts you daily. It's not cheap, but for any brand doing more than $500K/year in digital revenue, it pays for itself the first time it catches something real.

For tighter budgets, dnstwist is a free open-source tool that generates and checks permutations of your domain — transpositions, homoglyphs, additions, omissions — and shows which variants are already registered. Run it monthly at minimum. It won't catch registrations the moment they happen, but it gives you a systematic map of your exposure.

WhoisXML API offers a monitored feed of newly registered domains with keyword matching. Their "Brand Monitor" add-on lets you set terms and receive structured data on matches — useful if you want to pipe alerts into Slack or a ticketing system without paying DomainTools enterprise rates.

When a suspicious registration does surface, your next move matters. A newly registered lookalike domain that's sitting empty is very different from one that has three years of Wayback history, 40 referring domains, and organic traffic estimates pointing upward. That second one is an active threat — or an acquisition opportunity, depending on your position. Running it through DomainScope gives you a fast read on what you're actually dealing with: real backlink profile, anchor text distribution, penalty signals, registration history — everything that tells you whether this domain has been built up against you or is just a parked placeholder.

The habit that actually protects you

Set a calendar reminder — monthly, non-negotiable — to run three things: a dnstwist scan on your primary domain, a WhoisXML or DomainTools check on your brand terms, and a quick Wayback lookup on any new registrations that appeared since last month. Takes under an hour. Most months you'll find nothing. One month you'll find something that would have cost you real money if you'd missed it another 60 days.

The second habit: document your brand term list now, before you need it. Include your company name, product names, executive names if they're public-facing, and common misspellings you've seen in support tickets. That list is your monitoring fingerprint. The more specific it is, the less noise you get in alerts.

One question worth sitting with: if someone registered a lookalike of your brand yesterday, how many days would it take you to find out?

Read next: Brand Protection Through Domains: Smart Defensive Registration · Domain Autopsies: Five Real Teardowns from Gem to Trap

Want to vet a domain right now? Analyze it free on DomainScope →