CopycatCheck — Is someone pretending to be your business?

What it finds

Three ways a stranger uses your name.

Addresses that look like yours

One letter changed. A different ending. A word like closing or billing added. Registered quietly, sometimes years before anyone uses them.

Email sent as you

Not a lookalike: your exact address, forged. Most domains tell receiving servers to do nothing about it, because nobody ever turned that setting on.

Sites wearing your face

Your logo, pulled straight from your server. A login page that isn't yours. A payment form collecting from people who think they're paying you.

The Action Plan

A report that contains the fix, not a description of it.

The verdict, in one word

Exposed, partial, or taking steps, with two sentences on what that means for your business. Page one works on its own if you read nothing else.

The records, ready to paste

Not "consult your IT provider." The exact lines, generated for your domain. Your registrar's support chat can do it in ten minutes.

The notices, already written

For every live copycat: a factual abuse notice addressed to the right registrar and host, with the evidence attached. Send it yourself, or have us file it.

The staged plan

Turning enforcement on carelessly bounces your own invoices. The plan ramps it over 60 to 90 days, in the right order, with what to watch at each step.

What to tell your customers

A short notice you can send and a card you can print: how to tell a real message from a fake one, and what you will never ask them to do by email.

Then we watch

New imitations get registered all the time. For 90 days we keep checking, and you hear from us the day one appears.

Almost nobody has turned this on.

$3.0B

lost to business email compromise in 2025, reported to the FBI.

30.4%

of 5.5 million of the world's busiest domains publish a DMARC record at all.

12.8%

enforce a policy strong enough to stop someone forging their address.

Sources: FBI IC3 2025 Annual Report ($3,046,598,558 across 24,768 complaints, the second-largest loss category). DMARC figures: DMARCguard, February 2026 scan of 5,499,028 domains on the Tranco top-sites list; the enforcement share matches Valimail's independent measurement. Other studies report different totals because they measure different sets of domains.

How it works

Three steps, and only one of them is yours.

Enter your domain

We read public records: your DNS, certificate logs, domain registrations. Nothing is installed and we never touch your systems.

Read the plan

The verdict, the imitators, and the first fix written out in full, free. The Action Plan is what makes the rest fixable.

Fix it, or we do

Hand it to whoever manages your email. Or have us run the change ourselves, staged over sixty to ninety days so nothing breaks.

Why this exists

We built these tools because this happened to us. A domain imitating our own was registered last month, set up to send email, with no website on it at all.

ATX Works · Austin, Texas

atxworks.netRegistered Aug 17, 2026

EmailMail server configured

WebsiteNone

OwnerHidden behind a privacy service

A real finding from our own domain, from the public record, on the day we built this check.

Pricing

The check is free. The fixing and the watching are what you pay for.

You fix it. We watch.

Check

$495

Everything written out, ready for whoever manages your email.

The full Action Plan
Records ready to paste
Takedown notices drafted for you
90 days of watching
Re-check at day 90

Start with Check

We fix it. We watch.

Fix

$1,500

We run the change ourselves, staged so your email keeps working.

Everything in Check
Managed rollout over 60 to 90 days
Every sender found before anything enforces
Three takedowns filed and followed up
Six months of watching

Have us fix it

We handle all of it.

Guard

$2,500

For businesses whose name is the asset.

Everything in Fix
State filing hijack check
Breached-credential check
Social impersonation sweep
Twelve months of watching

Talk to us

Questions

The ones people actually ask.

Is this a scam? You contacted me out of nowhere.

Fair question, and you should ask it of anyone who contacts you about security. If we wrote to you, it's because a domain imitating yours was registered and we thought you'd want to know. Everything in that message came from public records: registration data, DNS, certificate logs. You can verify every line yourself, and you owe us nothing.

Will fixing this break my email?

It can, if it's done in one step. Your invoicing tool, your CRM and your newsletter platform all send mail using your name, and enforcement turned on carelessly will start bouncing them. That's why the managed version runs over sixty to ninety days: we watch the reports first, find every sender, then ramp the policy in stages. The free plan says the same thing, so your own IT person can do it just as safely.

Do you need access to my systems?

No. Never for the check, never for the Action Plan. Everything comes from records that are public by design. If you hire us for the managed rollout, you give us access to one thing, your DNS, and only after a signed agreement that says exactly what we'll change.

Can you tell me who registered a copycat domain?

Usually not, and we won't pretend otherwise. Owner details are hidden on most domains. What we can show is when it was registered, through which company, whether it can send email, where it's hosted, and exactly who to report it to. Only registrars, courts and law enforcement can get the name behind it.

Can you get the fake site taken down?

Often, yes. Most impersonation sites violate their host's own terms and come down within days when the evidence is good. Every Action Plan includes the notice already drafted and addressed. With your written go-ahead we file it and follow up. What we won't do is promise an outcome we don't control.

What if you find nothing?

Then you'll read a page that says so, listing every variation we checked and confirming that your email can't be forged. That's a good day, and it's worth knowing. If it's the free check, it cost you nothing.

Who is behind this?

ATX Works, a small studio in Austin, Texas. We built these tools because this happened to us, and every tool we sell is one we use. There's a person on the other end of the email.