Find the lookalike domains and copycat sites targeting your brand. The first check takes 30 seconds and needs no sign-up.
Your site
Lookalike
Registered 3 days ago · same logo, same sign-in form
Brand-protection vendors sell annual contracts through sales calls. Dokyma is self-serve, priced for startups and small businesses, and free to start.
Zone files from .com, .net, .org, .xyz, .shop, .app and 18 more registries.
The problem
They register a name that looks like yours, copy your site and send your customers to it. Most businesses find out from a customer who already paid.
Names like yourcompany-shop.com or yourcornpany.com, where 'rn' reads as 'm' at a glance.
Your logo, colours and sign-in or checkout page, copied straight from your live site.
Stolen logins and payments, chargebacks, and angry customers who think you scammed them.
How it works
Add your domain and see the first results in a few minutes.
Enter the domain your customers know. That's the whole setup.
Every scan matches your name against the zone files and checks the sites on what it finds.
When a scan finds a likely impersonator, you get an email and the evidence in your dashboard.
Send the registrar a pre-written abuse report, then see whether and when the site comes down.
What you get
Not a list of every domain that happens to contain your name.
We read the registries' own zone files, not search results: 240M+ domains across .com, .net, .org and 21 more zones, refreshed daily. Your exact name is also checked on about 60 other TLDs, such as .ai and .io.
We load each live lookalike and compare it with your site: layout, colours and favicon. A parked page and a working clone of your sign-in page get very different scores.
An AI read of each suspicious page flags phishing patterns and separates real threats from coincidental names. On demand on Startup, automatic on Pro.
Each scan checks public certificate logs for SSL certificates issued to lookalikes of your brand. A new certificate on a suspicious name often means a phishing site is being prepared.
When a lookalike shows evidence of active abuse, send its registrar a report with screenshots and registration details. We find the right abuse contact for you.
After you report a site, we recheck it daily and show whether and when it went down, and alert you if it comes back.
Email security
Impersonation often arrives by email. We check the DNS records that decide whether a forged email from your domain reaches an inbox, and watch the lookalikes that could send one.
An A–F grade for SPF, DMARC, DKIM, MTA-STS and BIMI, with the exact DNS record to copy for every gap. Re-checked on every scan.
Parked and defensive domains are easy to spoof. We check that each one can't send mail and give you the three records that close it off.
A lookalike that adds mail servers is getting ready to send phishing. You get an alert after the scan that spots it.
Email security for example.com
61/100 · DMARC is monitoring only
Pricing
Prices on the page, no sales calls and no annual contract required.
Free forever
For growing businesses
+ €19/month per extra domain
Full brand protection
+ €19/month per extra domain
Everything in Startup, plus:
Compare every feature Need a custom plan? Contact us
Run a free check in 30 seconds, or create an account to keep watching.