July 2026
Suspected brand-lookalike domains observed across our Australian brand watch-list this month — a factual, public-registry measurement. See how we measure this. These are suspected lookalikes, not adjudicated findings; the ones we confirm are reported to Netcraft.
915
Lookalike domains
145
Brands affected
756
Submitted for takedown review
50
Flagged likely phishing
Lookalike domains, month on month: +251 (+38%) vs June 2026 (+20 brands).
Spotlight: superannuation
hesta.com.au was the #6 most-targeted Australian brand this month (17 lookalike domains) — a sign impersonation has moved beyond banks and retail to any trusted brand with money attached.
Most-targeted Australian brands
Coverage: newly registered generic-TLD domains (.com, .shop, .xyz and similar). .au registrations are not yet included, so counts for brands on .au domains are a lower bound.
- amazon.com.au38
- target.com.au28
- kmart.com.au22
- amp.com.au21
- vanguard.com.au21
- hesta.com.au17
- ing.com.au16
- qantas.com.au16
Counted in lookalike domains. How we count these
Global brands targeted
- apple.com83
- google.com59
- hellostake.com50
- revolut.com35
- easypark.com22
Counted in lookalike domains. How we count these
Where the domains were registered
Aggregate registrar counts over the month. Raw counts partly reflect registrar size, and 428 domains hid behind WHOIS privacy. Registrars are named in aggregate only — not accused of wrongdoing.
- GoDaddy63
- Dynadot60
- NameCheap39
- Spaceship29
- GMO Internet (Onamae)24
- Hostinger23
3
Parked / for sale
428
Registrant hidden (WHOIS privacy)
Spotted a fake site?
Report it to the brand, to Scamwatch (scamwatch.gov.au), and check anything suspicious with Ask Arthur. Full method: how we detect clones.