{"uid":"cap_dxOvnko8nS6-bAhA2hhiL","slug":"how-is-brand-lookalikes-a03e7de7","name":"how.is Brand Lookalikes","description":"Find newly registered look-alikes of a brand: typos, look-alike characters, the same name on another TLD, or the brand beside a lure word, new in the zone files in the last 14 days, each with a risk tier and reasons.","url":"https://how.is/v1/brand/lookalikes?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"days":{"type":"integer","maximum":14,"minimum":1,"description":"Only names new in the last N zone days (default 14)"},"brand":{"type":"string","maxLength":253,"description":"A brand name or one of its domains, e.g. paypal or paypal.com (4-30 characters)"},"min_tier":{"enum":["critical","high","medium","low"],"type":"string","description":"Only matches at or above this tier"}}},"responseSchema":{"type":"json","example":{"data":{"_shape":"data: brand, window{from,to,days}, matches[{domain, day, kind, matched, lures, tier, score, signals, ns{provider,hint}, census{state,registrar}, risk{tier,verdict,target}}], window_totals{total, by_tier, by_kind, listed_cap}, variants_searched, saturated, note."},"result":"Brand look-alike domains for the requested subject","receipt":{"rail":"x402","tool":"lookalikes","charge_usd":0.02,"settlement_tx":"0x…"}}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.02","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.02/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.02","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.02","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_FFTSY5-WT1psT1wg9tUDP","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.02","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Finds newly registered look-alike domains of a brand (typos, homoglyphs, lure words, other TLDs) from the last 14 days of zone files, each with a risk tier and signals.","exampleAgentPrompt":"Can you scan for any new look-alike domains targeting 'stripe' registered in the last 7 days — only show me the high or critical risk ones?","exampleUseCases":[{"title":"Phishing domain alert for fintech brand","prompt":"Find all newly registered domains that look like 'coinbase' from the last 14 days and flag anything that's at least high-risk — I want to know about typos, lure words, and homoglyphs."},{"title":"Weekly brand monitoring for e-commerce","prompt":"Pull a list of any lookalike domains for 'shopify.com' that appeared in zone files over the past 7 days, so I can review anything critical or high risk before our security meeting."},{"title":"Pre-launch trademark sweep","prompt":"Before we launch our brand 'vaultpay', can you check if any impersonating or look-alike domains for it have been registered in the last 14 days and tell me the risk level for each?"}],"resultDescription":"Returns a list of newly registered look-alike domains for the queried brand, each annotated with: the matched domain, registration day, match kind (typo, homoglyph, lure word, alternate TLD, etc.), risk tier (critical/high/medium/low), score, signals explaining the risk, nameserver provider hints, registrar and registry state, and a risk verdict. Also includes aggregate window totals by tier and kind, number of variants searched, and a note if results were capped.","failureModes":["Brand name shorter than 4 or longer than 30 characters returns a validation error","Invalid min_tier enum value causes a 400 error","Days value exceeding 14 causes a validation error","No look-alikes found returns an empty matches array with window totals","Payment failure via x402 protocol returns 402 with no data","Brand name not recognized or too generic may return low-signal results"],"whenToPreferThis":"Choose this endpoint when you need to proactively detect newly registered domains that could impersonate a specific brand — especially for brand protection workflows, phishing early-warning systems, or security team alerting. It is uniquely valuable because it queries real zone file data from the last 14 days rather than historical WHOIS, so it surfaces threats while they are still fresh. Prefer it over generic WHOIS or domain search tools when the goal is risk-tiered impersonation detection rather than domain availability checking.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-31T18:40:01.996Z","isFirstParty":false,"canonicalSlug":"how-is-brand-lookalikes-a03e7de7"}