Get a brand audit

Home / Brand Protection / Fake websites & clones

Fake websites & clones

A clone is a copy of your website. It appears in search results for your name and steals your customers' money and data. In iGaming, it takes deposits. In crypto, logins and wallets. In fintech, cards and ID documents. We take down clones in as little as 3 hours.

Free. Delivered within 1 business day.

What a clone looks like in igaming, crypto and fintech

iGaming

A copy of your casino with your logo and bonuses. It takes deposits. Or it sends players to someone else's casino through a rotator (a link that sends different visitors to different casinos).

Crypto

A “Sign In to … Exchange” page on free hosting. It asks for the exchange login and password. For wallets, it asks for the seed phrase.

From our scan for one exchange: three pages were marked “empty page”. In fact, they posed as the exchange's sign-in page.

Fintech

A copy of a bank or payment card website. It collects card details and documents for identity checks.

Your customer searches for you and pays the clone

  • “brand login”
  • Mexico
  • 2026-10-02
  • position 3
  1. brand-mx.com
  2. /register
  3. pay.unknown-psp.io

We judge a site by where your customer goes, not by how the page looks. Method →

How we find clones

100

positions in search results, in every country. 57% of abuse findings are below position 20. You miss them if you check only the first page

Mobile results separately

Some clones appear only in mobile search results. You don't see them on desktop

Certificates

Other names in the same SSL certificate show all domains of one owner. This includes domains that are not in search results

Clicks and name checks

We click the buttons on review sites. We check similar names in different domain extensions. This is how we find clones outside search results

Clone or your own site

First, your list

Before any complaint, we get your list: your domains, mirrors, sites your SEO agency built, and affiliate links. We don't touch your sites or your affiliates.

Then, the certificate

The company that issues a certificate checks the owner's name in it. We once found 16 identical copies of one home page. Domain records (WHOIS and DNS) could not tell them apart. The certificate could: some were issued to the brand's company, others to a different name.

One group of brands had 352 domains in its certificates. Without this check, a search for clones would have marked the group's own sites as abuse.

We take down the network, not one domain

Domains change every day

In one day, the same button led to three different domains of one operator. If you take down one, you just wait for the next.

We link them into a network

We use the affiliate ID, the certificate and a shared redirect domain that the clicks pass through. 127 domains turned out to be two affiliate accounts. One link-masking service connected six sites in three countries.

Complaints against the whole network

We file against every domain in the network at once. If a domain comes back, we take it down again.

How we take down a clone

Google and Bing search results

3 h

median from complaint to removal

Letter of authorization (LOA): yes

Cloudflare and hosting provider

24 h+

the site stops loading

LOA: no, it's a fraud complaint

Registrar

up to 2 weeks

the domain stops working

LOA: no for phishing, yes for trademark complaints

UDRP

~2 months

a domain dispute: you get the domain · details

LOA: yes, from the trademark owner

Case study · crypto casino clone

In 32 days, we won back 160K branded searches a month

The clone copied the interface, bonuses and content of a licensed crypto casino. It appeared in search results for the casino's name. We took the clone down with complaints to Google and Bing. We filled the search results for the brand name with the client's content.

160Ksearches for the clone's name per month in Pakistan
3 countriesPakistan, India, Bangladesh
12 monthsthe clone has not come back to search results
Read the case study

FAQ

Will you call our mirror a clone?

No. Before the first complaint, we get your list of domains and mirrors. We check the certificate and registration date of unknown domains. We file only after you say “not ours”.

Can you take down a clone without a trademark?

Yes. A clone copies your site: text, logo, images. So we remove it from search results with a copyright complaint (a DMCA takedown notice). The hosting provider shuts it down as fraud. You need a trademark to take the domain itself through UDRP.

Can you take down a clone hidden behind Cloudflare?

Yes. We file a complaint with Cloudflare. Cloudflare passes it to the hosting provider and tells us who the provider is. Then we contact the hosting provider directly. The site stops loading. This takes 24 hours or more.

See who's profiting from your brand

Send a request. Within 1 business day we'll show you who is making money off your name and what we can take down. Free.

Book a consultation