Is the free scan really free?
Yes. Enter one domain and see how many registered domains resemble it, with counts by pattern, how many point to a server, and one sample record. It uses only public DNS and published registration data, and you don't need an account.
What does the free scan check?
The closest variations of your domain: similar characters, swapped or missing letters, added words like shop or store, and different endings like .co or .shop. A variation only counts if it's registered.
What doesn't the free scan do?
It doesn't monitor, take screenshots, or file or send any notice. A registered lookalike is not necessarily used in bad faith. Paid Thicket plans scan daily for new lookalikes and prepare takedown notices. You decide on and approve every notice.
What does one plan cover?
One brand. Product lines under your brand name and website are included. Separately trademarked brands or brands with their own website count as separate brands.
What counts as a takedown?
A Successful Takedown: a notice you approved is filed and, within 30 days after it is filed, the target site or domain is suspended, removed, disabled, or no longer resolves, for any reason. A notice that doesn't lead to a Successful Takedown within that period uses no credit and costs nothing.
Will you send legal letters without my approval?
No. Thicket sends only the takedown notices you approve. We don't prepare or send legal letters, URS, or UDRP filings; talk to your attorney about those. We aim to file within 1 business day of your approval.
How do you avoid false alarms?
A suspect only becomes a match if it shows your brand and harmful content. A parked or unrelated lookalike domain isn't flagged as a match.
What records does Thicket keep?
A SHA-256 hash of each capture and a log of each notice. Timestamped records of the suspect sites we find, and screenshots of suspect sites that pass a live check (the number per run is capped).
Who do notices go to?
The registrar, host, and CDN, plus blocklists including Netcraft, APWG, Google, and Microsoft. Copyright cases get DMCA notices. After 24 hours, we may suggest follow-ups for you to approve, such as a registry report or an ICANN complaint. We aim to file within 1 business day of your approval.
Can the scammer stop the process by replying?
No. Replies are checked against your account before anything changes.
I'm an attorney. Can I approve notices for my clients?
You can be your client's approver: every notice for that brand needs your approval before Rubus Labs sends it on the client's behalf, and one Agency account can manage multiple client brands. Client brands are billed at Agency pricing (2-brand minimum), paid by your firm or by your client.
How long does setup take?
Onboarding is 6 self-serve steps at dashboard.getthicket.com/onboarding.
How is this different from Netcraft, Bolster, ZeroFox, and others?
They're built and priced for large enterprises. Thicket finds lookalikes. Timestamped records of the suspect sites we find, and screenshots of suspect sites that pass a live check (the number per run is capped). Takedown requests you approve. No takedown is guaranteed. Plans are Monitor, Protect, and Agency.