Scam Detective
From $9 lookalike list · free preview first

Find who's cloning
your brand online.

Free preview shows your exposure score + severity. Most founders unlock the $9 Lookalike Domain List for every cleartext host + risk rating. Need the full pack? The $29 Brand Impersonation Audit adds evidence depth, takedown template, and PDF. Guest checkout — no email wall.

  • Free preview: exposure score + severity — hostnames locked — no card
  • Primary unlock $9: cleartext lookalike list + risk on every domain
  • Full $29 audit: deeper evidence, takedown template, PDF
  • Guest checkout · no email wall · pay once

Sample lookalike findings · unlock from $9

Northline Outfitters · exposure 78 · high
Full sample + takedown ↓
critical
northl1ne.co
11-day-old typosquat · cloned checkout harvests cards off-brand
94
high
northline-shop.com
Logo + SKU clone · crypto/gift-card only · no address
81
high
get-northline.net
Fake ‘order help’ ads · password reset phishing
76
Takedown template · included
Subject: URGENT — Trademark / brand impersonation…
…suspend northl1ne.co · evidence: typosquat + cloned checkout…
Free preview · no cardStripe secure checkout$9 list · primary unlockGuest checkout · no email

FREE BRAND PREVIEW

No card · unlock from $9

Who’s cloning your brand?

Brand name or domain. Instant free teaser: exposure score + severity (hostnames locked until $9) — no email, no card.

Prefer a manual pass first? DIY lookalike check

Instant try:

Score + severity free · names from $9 · guest checkout

SAMPLE FULL AUDIT · $29 PACK (LIST IS $9)

Sample Brand Impersonation Audit

Anonymized example for a DTC brand. Your unlock uses this same structure — lookalikes with risk ratings, evidence snippets, action steps, takedown template, and PDF on your order page. If your full audit finds zero actionable lookalikes, refund on request.

Sample · $29 deliverableAnonymized brand

Brand Impersonation Audit: Northline Outfitters

Legitimate domain: northline.co · Full $29 audit format shown · start with the $9 lookalike list for named domains + risk.

78
Exposure
High exposure

Four active impersonators found in public DNS and ad inventory. Worst actor (northl1ne.co) runs a near-clone checkout harvesting cards. Below: each finding with risk rating and evidence — plus the takedown email you can copy after unlock.

Lookalike findings4 researched · risk-rated
criticalnorthl1ne.coTyposquat · checkout cloneRisk 94

Evidence: Registered 11 days ago. Mirrors the real homepage hero and product grid. Checkout posts card data to a non-brand Stripe-looking form on a different origin.

highnorthline-shop.comLookalike storefrontRisk 81

Evidence: Uses brand logo assets and identical product SKUs at 40–60% off. No physical address; only crypto and gift-card payment options at cart.

highget-northline.netPhishing / support lureRisk 76

Evidence: Ads target “Northline order help.” Password reset page captures email + password and redirects to the real site after submit.

mediumnorthlineoutfitters.shopCopycat marketplaceRisk 58

Evidence: Thin content site with scraped reviews. Domain privacy on, shared hosting with three other brand-clone shops in the same ASN.

Subject: URGENT — Trademark / brand impersonation takedown request

To: abuse@[registrar-or-host]

I am writing on behalf of Northline Outfitters (legitimate domain: northline.co) to request immediate suspension of the domain northl1ne.co and associated hosting.

Evidence of impersonation:
• Domain is a character-substitution typosquat of our brand
• Site reproduces our logo, product names, and checkout flow
• Visitors are asked for payment credentials on a non-brand origin
• Domain age: 11 days; no authorization from our company

Please disable DNS/hosting for northl1ne.co pending our formal complaint. I can provide trademark registration details and additional screenshots on request.

Regards,
[Your name]
[Title], Northline Outfitters
[Phone] · [Email]

Sample only — your audit names your brand and worst lookalike. We do not send takedowns or give legal advice.

Zero actionable lookalikes in the full audit? Refund on request.

NOT ANOTHER SCANNER

VirusTotal finds malware. We find brand clones.

A clean VirusTotal result doesn't mean your brand is safe. Fresh lookalikes, typosquats, and copycat stores often have zero AV detections on day one. Start with the $9 lookalike list — or unlock the $29 Brand Impersonation Audit for deeper evidence plus a takedown template.

VirusTotalAV / hash reputation on known files & URLs
Scam DetectiveLookalikes, typosquats, copycats + payment red flags
From $9$9 list · or $29 full audit with PDF + takedown template

PRIMARY: LOOKALIKE LIST · $9

Start at $9. Full audit stays $29.

Cold traffic converts on the $9 Lookalike Domain List. Keep the $29 Brand Impersonation Audit when you need the full evidence pack + takedown template. Guest checkout for both.

Need a one-off suspicious link vetted? · not the primary path for brand founders.

0–100 risk score

A single number you can act on — calibrated from domain age, impersonation signals, store patterns, phishing markers, and payment red flags.

Plain-English verdict

Safe, suspicious, or likely scam — plus the evidence behind it. No jargon wall, no fear-mongering filler.

Top 5 red flags

Each flag comes with concrete evidence — not a checklist of generic tips you already know.

What to do now

A 3-step action list tailored to this target. Brand audits also include a ready-to-send takedown template.

HOW IT WORKS

Free brand preview. Unlock from $9.

01

Enter your brand

Company name + domain. Compare the free teaser to the sample on this page so you know the format.

02

Free exposure preview

In about 15 seconds: brand exposure score + severity badge — hostname names stay locked until the $9 list.

03

Unlock from $9

Most people start with the $9 lookalike list (named domains + risk). Full $29 Brand Impersonation Audit stays one click away — evidence pack, takedown template, PDF.

Brand path only here — $9 list primary, $29 full audit secondary. Guest checkout.

What we are — and aren't

Scam Detective sells one-time investigative reports. We do notoffer continuous monitoring, real-time feeds, APIs, takedown execution, fund recovery, or legal advice. If you need those, you need a different service — and we'll say so up front.

FAQ

Straight answers

VirusTotal aggregates antivirus hits on files and known-malicious URLs. Scam Detective investigates commercial scam patterns scanners miss — fresh lookalike domains, fake-store checkout flows, payment red flags, and brand impersonation. You get a plain-English verdict, evidence-backed red flags, and a 3-step action plan — not a malware hash lookup.

Protect your brand before a clone converts your customers.

Free brand preview first. Most people unlock the $9 lookalike list for named domains + risk. Need the full pack? The $29 Brand Impersonation Audit stays one click away. Guest checkout. No email wall. No subscription.

$9 lookalike list — primary pathNamed domains + risk ratings$29 full audit — secondaryGuest checkout · no email wall