Lookalike / typosquat domain generator API

Generates likely impersonation domains for a domain (homoglyph swaps, keyboard typos, omission/insertion/transposition, alternate TLDs), checks which actually resolve in DNS, and risk-ranks them so registered lookalikes surface first. Answers 'typosquat domains for this domain', 'lookalike domains of X', 'which lookalikes are registered', 'phishing domain variants'.

Price$0.01per request

MethodPOST

Route/v1/security/lookalike-domains

StatusLive

MIME typeapplication/json

Rate limit60/minute

Cache3600s public

securitytyposquatlookalikehomoglyphdomainphishingdnsimpersonation

API URLhttps://x402.hexl.dev/v1/security/lookalike-domains

Integration docs

Example request

{
  "domain": "paypal.com",
  "limit": 60
}

Example response

{
  "domain": "paypal.com",
  "generated": 60,
  "registered": 1,
  "lookalikes": [
    {
      "domain": "paypa1.com",
      "kind": "typo",
      "resolves": true,
      "addresses": [
        "64.4.250.32"
      ],
      "risk": 75,
      "level": "high"
    },
    {
      "domain": "payxal.com",
      "kind": "typo",
      "resolves": false,
      "addresses": [],
      "risk": 25,
      "level": "low"
    }
  ]
}

Input schema

{
  "type": "object",
  "required": [
    "domain"
  ],
  "properties": {
    "domain": {
      "type": "string",
      "examples": [
        "paypal.com"
      ]
    },
    "limit": {
      "type": "number",
      "examples": [
        60
      ]
    }
  }
}

Output schema

{
  "type": "object",
  "additionalProperties": true
}