June 2026
Suspected brand-lookalike domains observed across our Australian brand watch-list this month — a factual, public-registry measurement. See how we measure this. These are suspected lookalikes, not adjudicated findings; the ones we confirm are reported to Netcraft.
664
Lookalike domains
125
Brands affected
538
Submitted for takedown review
43
Flagged likely phishing
Spotlight: superannuation
hesta.com.au was the #2 most-targeted Australian brand this month (26 lookalike domains) — a sign impersonation has moved beyond banks and retail to any trusted brand with money attached.
Most-targeted Australian brands
Coverage: newly registered generic-TLD domains (.com, .shop, .xyz and similar). .au registrations are not yet included, so counts for brands on .au domains are a lower bound.
- target.com.au43
- hesta.com.au26
- qantas.com.au23
- kmart.com.au20
- amazon.com.au17
- bonds.com.au15
- vanguard.com.au15
- ing.com.au13
Counted in lookalike domains. How we count these
Global brands targeted
- hellostake.com40
- apple.com37
- google.com21
- revolut.com19
- whatsapp.com18
Counted in lookalike domains. How we count these
Where the domains were registered
Aggregate registrar counts over the month. Raw counts partly reflect registrar size, and 303 domains hid behind WHOIS privacy. Registrars are named in aggregate only — not accused of wrongdoing.
- Dynadot53
- GMO Internet (Onamae)38
- NameCheap31
- GoDaddy30
- NameSilo22
- Spaceship21
1
Parked / for sale
303
Registrant hidden (WHOIS privacy)
Spotted a fake site?
Report it to the brand, to Scamwatch (scamwatch.gov.au), and check anything suspicious with Ask Arthur. Full method: how we detect clones.