{"uid":"cap_qvrzAHYHIjfy6YTy1gwCf","slug":"domain-phishing-lookalike-scanner-596bb5c3","name":"Domain Phishing Lookalike Scanner","description":"Scan a domain for phishing lookalikes — typosquats, homoglyphs, and common phishing registration patterns. Returns matched lookalike domains found in the wild. Call to detect brand-impersonation phishing campaigns targeting a company before they're reported elsewhere.","url":"https://atq6wtkp6k.execute-api.us-east-1.amazonaws.com/prod/v1/payg/domain","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"domain":{"type":"string","description":"Root domain to scan for lookalikes"}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.5","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.5/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.5","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.5","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_aR5M-Y8ytFluNkEXUuQ_7","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.5","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Scans a domain for typosquats, homoglyphs, and phishing lookalike registrations that may be impersonating a brand.","exampleAgentPrompt":"Can you scan acme.com for any phishing lookalike domains — typosquats, homoglyphs, or suspicious registration patterns — that might be impersonating us?","exampleUseCases":null,"resultDescription":"Returns a JSON object with the scanned domain, timestamp, a list of discovered lookalike domains (each with their domain name), the total count of lookalikes found, and the number of candidate domains checked during the scan.","failureModes":["Invalid or malformed domain input returns an error","Domain not resolvable or non-existent domain may return no results or an error","Rate limiting or payment failure (x402) may block the request","Timeout if the scan takes too long for complex domains","No lookalikes found returns an empty list with lookalikes_found of 0"],"whenToPreferThis":"Use this endpoint when you need proactive brand-impersonation detection and want to find phishing lookalike domains before incidents are reported. Prefer this over manual DNS lookups or generic WHOIS searches when you need automated typosquat and homoglyph pattern matching at scale for a specific domain.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-15T18:32:47.842Z","isFirstParty":false}