Someone registered vectel-nl.com and is phishing in our name
Look-alike domains (vectel-nl.com, vectell.nl, vectel.co.nl) sit outside your DMARC reach because they're different domains. Countermeasures: detection, takedown via registrar or host, and defensive registration of the most likely variants.
Try this first
- 1Run a check via dnstwist or urlscan.io for variants on your brand. Look for typos, IDN homographs, TLD variants.
- 2Defensively register the two or three most plausible variants (.eu, .com, .nl, the most likely typo). Not a hundred, that's waste.
- 3On active abuse: takedown via registrar (whois → abuse contact) and the hosting provider. Report phishing pages to Google Safe Browsing and Microsoft SmartScreen.
- 4Enable a brand-protection service like PhishLabs, Recorded Future or an MSSP for ongoing monitoring if you're targeted.
- 5Define an internal procedure: staff report look-alikes to IT, IT escalates to registrar and blocks at the mail gateway.
When to bring us in
If you're in an actively phished sector (finance, accounting), an ongoing monitoring subscription isn't a luxury.
See also
- Our emails land in spam for some recipientsAlmost always an SPF, DKIM, or DMARC setting that is wrong or missing, or a sender name that mimics a well-known brand.
- Someone reports receiving phishing emails "from us"Read: spoofing. Someone is abusing your sender name, not necessarily your actual mailbox.
- An email bounces (NDR): delivery failedThe NDR text usually states the exact reason. Reading it is step one.
None of the above fits?
Describe your situation below. We pass your input plus the steps you already saw to our AI and return tailored next-step advice. If it's too risky to DIY, we'll say so.
Or skip the DIY entirely
Our Managed IT clients do not look these things up. One point of contact, a fixed monthly price, resolved within working hours.