Skip to content

Bangladesh-first · English and Bangla brand variants

Know when someone is pretending to be your brand.

ScamBlock AI discovers lookalike domains, fake websites and phishing links that impersonate your business, prioritises them with explainable risk and confidence scores, preserves evidence and guides your response.

আপনার ব্র্যান্ডের নামে ভুয়া সাইট ও লিংক, আগেভাগে ধরুন।

  • Risk and confidence scored separately
  • Sources and limitations always visible
  • Safe fetching, no scripts executed
  • Evidence-ready PDF and CSV reports
Findings · Example Brand
Illustrative example
example-brand-bd.com
critical
high confidence
login form · bKash keywords · registered 9 days ago
exarnplebrand.com
high
medium confidence
homoglyph (rn→m) · live site · title mentions brand
examplebrand.shop
medium
medium confidence
extension swap · resolves · certificate issued
examplebrand-offer.xyz
low
low confidence
keyword affix · parked page
Sources: DNS · new-domain list · certificate logs · safe fetch · RDAPLast check: a moment ago

Example hosts shown for illustration only; real findings include captured evidence.

The problem

Impersonation starts before you hear about it

A lookalike domain costs a few hundred taka. A fake payment page collects money in your name for days before a customer complains. By then the evidence is gone and the page has moved.

You find out from customers

Most brands discover impersonation when a victim calls, posts a screenshot or asks for a refund they never paid you.

Variants are endless

Typos, swapped extensions, 'bd' and 'official' suffixes, Bangla and English spellings. Nobody can search them by hand every week.

Evidence is what gets action

Registrars, hosting providers, platforms and the police act on dated evidence, not on a screenshot from WhatsApp.

What you get

Discover, prioritise, preserve, respond

A practical workflow built for small teams, not a wall of alerts.

Discover

Deterministic lookalike generation across typos, homoglyphs, keywords and extensions, checked against public DNS, certificate transparency logs and the daily list of newly registered domains.

Prioritise

Risk severity and evidence confidence are scored separately, with every contributing signal listed. A name match alone never becomes a 'critical' alert.

Preserve

DNS records, certificate details, page titles, content hashes and registration dates are captured with timestamps and kept in an audit trail.

Respond

In-app alerts, case management, false-positive controls, allow-lists for partners and guided next steps for reporting.

How it works

Five steps, fully transparent

  1. 01

    Tell us about your brand

    Name, Bangla and English spellings, official domains, social profiles. Two minutes, no technical setup.

  2. 02

    We generate and check lookalikes

    Thousands of typo, homoglyph, keyword and extension variants are generated deterministically and checked against public DNS and certificate logs.

  3. 03

    Suspicious hosts are inspected safely

    Live pages are fetched without executing scripts and analysed for login forms, payment keywords, urgency language and brand mentions.

  4. 04

    You get explainable findings

    Each finding shows its signals, a risk score, a separate confidence score, the evidence captured and the time it was last checked.

  5. 05

    Respond with evidence

    Mark false positives, open cases, export PDF/CSV evidence packs and follow guided steps for reporting and customer warnings.

Coverage, stated plainly

What we monitor, and what we do not

Every report lists the sources checked, the time of the last check and the limits of the scan. No product can promise complete detection; we promise clarity.

Monitored automatically

  • Lookalike domains (public DNS)
  • Newly registered domains (daily public list)
  • Certificate transparency logs
  • Live page content of suspicious hosts
  • Registration dates (generic domains)

Assisted, on request

  • Facebook, Instagram, Telegram and app-store links you submit
  • Suspicious URLs reported by your customers
  • Guided reporting and takedown preparation
  • Not monitored: private groups, DMs, closed apps

Who it is for

Built for the businesses Bangladesh buys from online

E-commerce & F-commerce

Fake storefronts, payment pages and 'offer' domains that collect bKash or Nagad payments in your name.

Education & training

Fake admission, result and fee-collection pages during admission season.

Financial services

Lookalike domains and phishing pages targeting customers of banks, NBFIs, insurers and payment providers.

Recruitment & travel

Fake visa, ticket and job-offer sites that use your agency's name.

Pricing

Priced in taka, for Bangladeshi teams

Start with the free exposure check. Pilot pricing is open to the first customers while we validate the plans.

Starter

৳4,990/month

  • 1 brand monitored
  • Scans every 24 hours
  • 30 URL checks per day
  • Alerts and PDF/CSV reports

Growth

৳12,990/month

  • 3 brands monitored
  • Scans every 12 hours
  • 100 URL checks per day
  • Case management and PDF/CSV reports

Business

৳29,990/month

  • 10 brands monitored
  • Scans every 6 hours
  • 300 URL checks per day
  • Case management and PDF/CSV reports

Prices exclude VAT and are being validated with pilot customers. See the full comparison on the pricing page.

Questions

Straight answers

Do you monitor Facebook pages?
Not automatically. Meta does not offer a lawful API for searching public Pages at scale, so we assess the Facebook, Instagram and Telegram links you or your customers submit, and help you prepare reports to the platform.
Does a finding mean someone is a scammer?
No. A finding is a suspicion with a confidence level and evidence. Your team confirms or marks it as a false positive; we never publish accusations.
Can you take fake sites down?
We prepare evidence packs and guide you through registrar, hosting and platform reporting. Takedown decisions belong to those providers; we do not guarantee outcomes.
Is my data safe?
Each organisation's data is isolated server-side, every change is audit-logged, and suspicious pages are fetched in a sandboxed way that never executes their code.

See what is already using your brand name

Run a limited, real check of lookalike domains and certificate logs. Results in minutes, with sources and limitations stated plainly.