July 2026
Suspected brand-lookalike domains observed across our Australian brand watch-list this month — a factual, public-registry measurement. See how we measure this. These are suspected lookalikes submitted for review, not adjudicated findings.
1,000
Lookalike domains
150
Brands affected
792
Submitted for takedown review
40
Flagged likely phishing
Month on month: +196 (+24%) vs June 2026 lookalike domains (+21 brands).
Spotlight: superannuation
hesta.com.au was the #3 most-targeted Australian brand this month (30 lookalike domains) — a sign impersonation has moved beyond banks and retail to any trusted brand with money attached.
Most-targeted Australian brands
- amazon.com.au38
- kmart.com.au31
- hesta.com.au30
- target.com.au26
- vanguard.com.au20
- amp.com.au19
- coles.com.au18
- bonds.com.au16
Global brands targeted
- apple.com83
- hellostake.com56
- google.com55
- revolut.com34
- easypark.com19
Where the domains were registered
Aggregate registrar counts over the month. Raw counts partly reflect registrar size, and 504 domains hid behind WHOIS privacy. Registrars are named in aggregate only — not accused of wrongdoing.
- Dynadot60
- GoDaddy59
- NameCheap39
- Spaceship31
- GMO Internet (Onamae)26
- Hostinger21
6
Parked / for sale
504
Registrant hidden (WHOIS privacy)
Spotted a fake site?
Report it to the brand, to Scamwatch (scamwatch.gov.au), and check anything suspicious with Ask Arthur. Full method: how we detect clones.