Brand protection
How to Detect a Fake Website Using Your Brand
By PixelPrivate Security Team · Published · Updated · 7 min read
Short answer: To detect fake websites using your brand, generate likely lookalike domains (typos, extra words, other extensions), check which are registered, review what the live ones show, and prioritize those with login forms, copied content or your brand name.
Where fake sites come from
Attackers register names such as yourcompany-login.com or a one-letter typo, then copy your look to collect logins or payments.
Generate candidates
- Omit, duplicate, swap or replace characters (rn for m, 1 for l).
- Add words: login, support, secure, billing, account.
- Try other extensions (.co, .net, .shop).
Check what is registered
A candidate that does not resolve is only a name. Focus on those that exist.
Judge the risk
- Does it have a password field?
- Does it copy your name, logo or text?
- Is the page title nearly identical?
- Is it hosted somewhere unrelated?
- Is it simply parked or unrelated?
Search, but verify
Search your brand name plus words like “login” and check social media for impersonating pages. Do not enter real credentials into suspicious sites.
Keep notes
Record date, URL, screenshots and what the page does. This becomes your evidence package.
Checklist
- ☐ Variants generated
- ☐ Registered ones listed
- ☐ Live ones reviewed
- ☐ False positives dismissed
- ☐ Evidence saved for serious cases
Methodology
Describes the same passive approach PixelPrivate Brand Shield uses. It identifies indicators, not legal conclusions.