Shopping Cart

📌 Real‑World Examples of Domain Impersonation Scams

  1. Pfizer RFQ Scam

    Between Aug–Dec 2024, attackers registered domain names like pfizer-nl.com, pfizertenders.xyz, etc., to impersonate Pfizer and send fraudulent 'Request for Quotation' emails to business partners—leading to credential theft. 410 phishing emails were confirmed from these lookalike domains.

    inky.com/en/blog/fresh-phish-phishers-impersonate-pfizer-in-request-for-quotation-scam
  2. Booking.com Credential Harvesting

    Booking.com Credential Harvesting
    Starting December 2024, a phishing campaign used fake domains resembling booking.com to deliver malware to hospitality staff under urgent travel-related schemes

    microsoft.com/en-us/security/blog/2025/03/13/phishing-campaign-impersonates-booking-com-delivers-a-suite-of-credential-stealing-malware
  3. Department of Transportation Phish

    In August 2024, threat actors spoofed the U.S. Department of Transportation via the domain transportationgov.net to trick companies into clicking malicious “bidding” links

    inky.com/news/attackers-impersonate-dot-in-two-day-phishing-scam
  4. Tech Startups — £16K Loss

    In the UK (reported 2015), scammers procured lookalike domains (e.g. swapping lowercase “l” for “i”) and sent invoice emails impersonating CEOs to finance staff, successfully stealing over £16,000

    wired.com/story/hacking-start-up-email-london-phishing-attacks-money

📈 Why This Happens

  1. Lookalike & typo-squat domains are dirt cheap—TYPOs like .nl instead of .com are easy to exploit
    reddit.com+2 ¡ acaglobal.com+2 ¡ inky.com+2
  2. Phishing domains stay live for ~11.5 days after detection—enough time to cause real damage
    arxiv.org+2 ¡ inky.com+2 ¡ pcrisk.com+2
  3. Victims don’t differentiate between their brand’s various TLDs.

🚨 How This Harms Companies

Brand erosion
Customers lose trust when encountering convincing fake websites.
Revenue theft
Businesses get defrauded via bogus invoices, payroll redirections, and credential theft.
Reputational damage
Even one incident becomes a public relations nightmare.
Regulatory fallout
Data breaches due to credential exposure could incur fines and audits.

✅ The Dobrainer Approach

We preemptively register all major TLDs of your brand (e.g., .com, .net, .biz) which are in direct danger.

You can rent, buy—or let us manage these domains on your behalf.

This halts scammers right at the registrar, before they can use domains to deceive.

Frequently Asked Questions