{"uid":"cap_OL3ydoUWsTlHyINtqr32N","slug":"sitecheck-web-intel-domain-typosquatting-checker-dc4f1a10","name":"SiteCheck Web Intel Domain Typosquatting Checker","description":"For a brand domain, generates up to 24 lookalike names (letter omission, doubling and swapping, plus .co/.net/.org/.io swaps) and checks which ones have name servers in DNS right now. Registered-looking names are listed with their name servers. A lookalike with no name servers may still be registered without DNS, and this is not a trademark or phishing verdict.","url":"https://api.webintel-api.workers.dev/api/security/domain-typosquatting?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["domain"],"properties":{"domain":{"type":"string","description":"Brand domain such as github.com (required)"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.002","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.002/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_mRf9Gs-Qxh6gklHZpvVa3","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.002","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Generates up to 24 lookalike (typosquatting) domain variants for a brand domain and checks which ones have active DNS name servers.","exampleAgentPrompt":"Can you check which typosquatting or lookalike domains exist for stripe.com — I want to see which letter-swap, letter-omission, or TLD-swap variants have active name servers in DNS right now?","exampleUseCases":[{"title":"Brand protection audit for startup","prompt":"We just launched under acmepay.com — can you generate all the typosquat variants of acmepay.com and tell me which ones already have DNS name servers set up? I want to know who might be squatting on our brand."},{"title":"Phishing risk check before product launch","prompt":"Before we announce our new product at shopwave.io, can you check if any lookalike domains like shopwav.io, shoppwave.io, or shopwave.com are already pointing to name servers? I'm worried about phishing sites."},{"title":"Competitive intelligence on brand impersonation","prompt":"Can you scan for typosquatting domains around coinbase.com — things like coinbasse.com or coiinbase.com — and list any that have active DNS so our security team can investigate?"}],"resultDescription":"A list of up to 24 generated lookalike domain variants (using letter omission, letter doubling, letter swapping, and TLD substitution for .co/.net/.org/.io). Each variant is reported with its current DNS name servers if any are found. Domains with no name servers are not listed even if registered. The response includes a disclaimer that absence of name servers does not mean unregistered, and a positive result is not a trademark or phishing verdict.","failureModes":["Missing required 'domain' query parameter — request fails with validation error","Invalid or malformed domain string — may produce no useful variants or DNS errors","DNS resolution timeouts for some variants — those variants may be omitted or marked inconclusive","All 24 variants return no name servers — empty results list (not an error)","Rate limiting or upstream DNS resolver unavailability — service error response"],"whenToPreferThis":"Use this endpoint when you need a fast, automated sweep of common typosquatting permutations for a single brand domain and want to know which variants have active DNS infrastructure. It is best suited for brand protection monitoring, pre-launch phishing risk checks, and security audits where a quick DNS-level signal (name servers present or not) is sufficient. Prefer this over full WHOIS or registrar lookups when you need breadth across many variants quickly. Do not use this as a definitive trademark or phishing verdict tool.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-24T12:45:07.216Z","isFirstParty":false,"canonicalSlug":"sitecheck-web-intel-domain-typosquatting-checker-dc4f1a10"}