Index onlineMerchant portal
Api Endpoint

Typosquat Scanner

Generate common typo and look-alike variations of a domain and check which are already registered — catches character swaps, omissions, additions, homoglyphs, and alternate TLDs so agents can detect typosquatting and brand-impersonation domains targeting a company.

Open interactive test console

Offering

Provider
netintel.dev
Method
GET
Offering type
Api Endpoint
Transport type
http
Category
Security
Delivery
Not provided
Pricing model
Not provided
x402 version
2

Endpoint context

URL
https://netintel.dev/typosquat/scan
MIME type
application/json
First seen
2026-10-16T01:50:14.534Z
Last seen
Tags
typosquatting, brand protection, phishing domains, domain security, osint

Website

Payment pricing

x402 payment terms are the authoritative price for calling this endpoint.

Payment option 1
0.05 USDC
Atomic price: 50000 · Network: eip155:8453 · Asset: USDC · Scheme: exact
Payment option 2
0.05 USDC
Atomic price: 50000 · Network: solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp · Asset: USDC · Scheme: exact
Raw x402 terms
[
  {
    "scheme": "exact",
    "network": "eip155:8453",
    "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
    "amount": "50000",
    "payTo": "0xdaDc335482AD545296Fd7b28518A251fFCbEb9Df"
  },
  {
    "scheme": "exact",
    "network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
    "asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
    "amount": "50000",
    "payTo": "8FVeybWnB4dYrxTuPK7WzFZNAiEcFVaDLFnKpRwVGr5s"
  }
]

Observed health

Status
Healthy
Latest latency
104 ms
Average latency
372 ms
HTTP status
402
Last checked
Reachability
100% over 11 checks

Latency is measured to the first response headers. A reachable result does not verify response accuracy or merchant identity.

Input schema

{
  "type": "object",
  "properties": {
    "type": {
      "type": "string",
      "const": "http"
    },
    "method": {
      "type": "string",
      "enum": [
        "GET"
      ]
    },
    "queryParams": {
      "type": "object",
      "properties": {
        "domain": {
          "type": "string",
          "description": "Domain to scan for typosquat look-alikes (e.g. google.com) — must include a TLD"
        },
        "limit": {
          "type": "number",
          "description": "Max variations to generate and check (default: 30, max: 50)"
        }
      },
      "required": [
        "domain"
      ]
    }
  },
  "required": [
    "type",
    "method"
  ],
  "additionalProperties": false
}

Output schema

{
  "type": "json",
  "example": {
    "tld": "com",
    "name": "google",
    "grade": "D",
    "score": 35,
    "domain": "google.com",
    "findings": [
      {
        "rule": "high_typosquat_exposure",
        "detail": "10 of 10 look-alike domains are registered",
        "deduction": -40
      },
      {
        "rule": "homoglyph_registered",
        "detail": "A homoglyph look-alike domain is registered (highest phishing risk)",
        "deduction": -15
      },
      {
        "rule": "alt_tld_registered",
        "detail": "An alternate-TLD look-alike domain is registered",
        "deduction": -10
      }
    ],
    "available_count": 0,
    "registered_count": 10,
    "variations_checked": 10,
    "available_variations": [],
    "registered_lookalikes": [
      {
        "domain": "g00gle.com",
        "technique": "homoglyph",
        "registered": true
      },
      {
        "domain": "gogle.com",
        "technique": "omission",
        "registered": true
      },
      {
        "domain": "google.net",
        "technique": "alternate_tld",
        "registered": true
      }
    ]
  }
}