June 2026
Suspected brand-lookalike domains observed across our Australian brand watch-list this month — a factual, public-registry measurement. See how we measure this. These are suspected lookalikes submitted for review, not adjudicated findings.
804
Lookalike domains
129
Brands affected
628
Submitted for takedown review
25
Flagged likely phishing
Spotlight: superannuation
hesta.com.au was the #2 most-targeted Australian brand this month (35 lookalike domains) — a sign impersonation has moved beyond banks and retail to any trusted brand with money attached.
Most-targeted Australian brands
- target.com.au43
- hesta.com.au35
- kmart.com.au28
- bonds.com.au25
- coles.com.au23
- qantas.com.au23
- amazon.com.au17
- iinet.net.au16
Global brands targeted
- hellostake.com53
- apple.com42
- google.com21
- revolut.com19
- whatsapp.com18
Where the domains were registered
Aggregate registrar counts over the month. Raw counts partly reflect registrar size, and 378 domains hid behind WHOIS privacy. Registrars are named in aggregate only — not accused of wrongdoing.
- Dynadot60
- GMO Internet (Onamae)55
- GoDaddy39
- NameCheap33
- Spaceship27
- NameSilo22
51
Parked / for sale
378
Registrant hidden (WHOIS privacy)
Spotted a fake site?
Report it to the brand, to Scamwatch (scamwatch.gov.au), and check anything suspicious with Ask Arthur. Full method: how we detect clones.