2 fake Typology stores cut prices by 70% and share one server
Two live storefronts are selling under Typology's identity and product catalogue: typologydeal.co and typologydeal.com. Both run as working skincare shops, and both resolved to the same server.
TL;DR
- 90%: Highest visual similarity
- 2: Live storefronts
- 70%: Typical discount
- 1: Shared server IP
- First step: Archive both stores together
Captured 11 Sep 2026 · 14:11 UTC
- 90%
- Highest visual similarity
- 2
- Live storefronts
- 70%
- Typical discount
- 1
- Shared server IP
Typology's layout, with prices in dollars
Typology's homepage is restrained: a black announcement bar, a centred Typology Paris mark, sparse navigation, pale editorial photos and product-led copy. The fake stores reproduce that hierarchy closely enough to feel familiar before a shopper reads a word.
They aren't pixel-perfect. They swap the hero photo, move search into a large field, relabel the navigation and show prices in dollars. Those changes make each one read as a regional Typology storefront.
Close enough to pass as a regional Typology store before a shopper reads a word.
What we caught
Both stores use the Typology wordmark with the PARIS lockup, centred above a sparse beauty-store menu.
Real product names run throughout, including Skin Texture Refiner T30, Hydrating Serum A3 and Tinted Concealer T20.
Products are repeatedly cut to 30% of their listed price. A $41.50 product becomes $12.45, and a $31.50 product becomes $9.45.
typologydeal.co and typologydeal.com resolved to the same IP address and used the same pair of nameservers when captured.
2 domains, 1 server
The two domains shared the page title, storefront design, pricing pattern, nameservers and A record. That's one cluster.
One was registered on 17 August 2026. The other uses a country-code extension whose public registration record the scanner couldn't read. The infrastructure links them where ownership records can't.
A 90% visual match with no copied homepage text
The visual assessment rated typologydeal.co a likely copycat at 90% similarity with 93% confidence, and typologydeal.com at 88% similarity with 96% confidence.
The stores showed no broad text overlap with Typology's homepage. The match came from the brand presentation, category, store structure, product names and visual treatment combined.
How to shut it down
The takedown plan, step by step, built from the evidence above.
Archive both stores together
Capture both pages, DNS records, timestamps, product pages and checkout paths before the operator changes them.
File one package with host and registrar
Send one evidence package tying both domains to the same infrastructure and brand presentation.
Report both stores to the payment provider
Identify who processes payments and report both storefronts together, so they're reviewed as one operation.
Monitor the shared IP and nameservers
Watch the shared IP, nameservers, page title, brand lockup and product-copy pattern for the next domain.
Take it down yourself, or have us do it
Fake website and copycat store takedown
A person checks every copycat store and lookalike domain we find. Once you approve a case, our team reports it to the platform, host, registrar and Google.
Someone copied my website: what to do
A copycat cloned your store. What to save first, how to find its platform, host and registrar, and who to report it to, in the order that works.
Where to report counterfeits on every platform
The official counterfeit and IP reporting form for 157 marketplaces, store builders, hosts, registrars, payment, ad and social platforms, and who may file.
Summary
At 70% off, it looks like a Typology promotion
The word deal is the only warning in the domain. After the click, a shopper sees the Typology wordmark, real product names, polished photos and prices that read like a promotion. Anyone who pays $12.45 believes they bought from Typology, and any complaint follows the brand.
Taking down one store removes one URL. Linking both stores to one server lets you go after the operator's setup and catch the next domain that lands on it.
Scan your own brand
What would the scanner find around your brand?
Run the same sweep across lookalike domains, storefronts, marketplaces, ads, and social accounts.
More cases
2 fake Charlotte Tilbury stores sell its $225 Magic Cream refill for $67.50 and $23.62
charlottetilburystore.com copied 616 products at 70% off. A twin store sells the same catalogue cheaper still, the $225 refill at $23.62. On AliExpress, 40 listings put the brand's name on $1.09 to $25.55 makeup, 5 with its own campaign images.
Multi-channel2 fake REFY stores sell its range at 65% off, using REFY's own product photos
refybeautycare.shop and refybeautystore.shop sell REFY's range with its own photos, most items 65% off. 34 AliExpress 'REFY' lip gloss listings went up in August and September 2026, most under $2, and new eBay accounts reuse REFY's model photos.
Multi-channelA fake BYOMA store cuts 36 products 65%, and AliExpress sells 'BYOMA' serums at $1.09
byomacare.shop lists 62 BYOMA products with the brand's own studio photos, 36 at 65% off. Two French clones copy BYOMA's site down to its product IDs, and BYOMA's campaign photos sell $1.09 'BYOMA' serums on AliExpress and turn up on DHgate and eBay.