Fake websites that imitate real brands

What it is

A lookalike domain is a web address that imitates a real brand closely enough to trick people who are moving quickly.

Why it matters

Lookalike domains are effective because people recognize brands faster than they inspect exact spelling. They are commonly used for fake login pages and payment scams.

Warning signs

• The domain contains extra words before or after a trusted brand.
• Characters are swapped, doubled, removed, or replaced with similar-looking letters.
• The site uses a different top-level domain than expected.
• The page copies a known brand's logo, colors, and sign-in layout.

What to do

1. Identify the real domain, not just the brand word inside the URL.
2. Use a saved bookmark or password manager entry for important accounts.
3. Do not assume the lock icon means the organization is legitimate.
4. Report lookalike domains to the impersonated brand or your security contact.

Examples

Risky: paypaI.example uses a capital I where your eye expects a lowercase L.

Safer: Use your password manager; it usually will not autofill on the wrong domain.

Risky: brand-support-login.example claims to be a major service.

Safer: Go to the brand's main site and find support from there.

Common mistakes

• Reading a domain too quickly and seeing the brand you expected.
• Trusting HTTPS alone. A fake site can still have a lock icon.
• Ignoring small spelling changes in a mobile browser address bar.

Key takeaway: Read the registrable domain slowly, from right to left, before entering anything sensitive.