Pricing

$250.00 / 1,000 completed audits

Domain Typosquat Audit

Brand protection in one call: generate lookalike domains for a brand (typos, transpositions, homoglyphs, hyphenation, TLD swaps) and check via DNS which are actually registered. The registered lookalikes are your threat list for phishing and brand abuse. Charged only on completed audits.

Pricing

$250.00 / 1,000 completed audits

Rating

0.0

(0)

Developer

Chris Arsenault

Actor stats

Bookmarked

Total users

Monthly active users

2 days ago

Last modified

What you get

Summary plus one row per generated lookalike:

{
  "domain": "example.com",
  "candidates_checked": 40,
  "registered_lookalikes": 7,
  "threats": ["example.net", "example.co", "examp1e.com", "exmaple.com"],
  "note": "Registered lookalikes are not necessarily malicious, but each is a domain someone else controls that resembles yours."
}

{ "domain": "examp1e.com", "kind": "homoglyph", "state": "REGISTERED" }

Use cases

Brand protection: the registered-lookalike list is the starting point for takedowns, monitoring, and defensive registrations.
Phishing readiness: know which convincing lookalikes already exist before one is used against your customers.
Agents doing security due diligence: a brand-exposure snapshot as one tool call, re-runnable on a schedule to catch new registrations.

How registration is checked

A domain with a live DNS zone (an NS/SOA/A answer, or NOERROR) is treated as registered even if it is parked; a domain that returns NXDOMAIN is available. Checks run over public DNS-over-HTTPS, concurrently, so a full sweep takes seconds.

Honesty notes

Registration state is DNS-derived (fast and reliable for the "does it exist" question); it does not include WHOIS ownership details.
Candidate generation covers the highest-risk variation patterns, capped at 40 for a fast, focused sweep; it is not an exhaustive permutation of every possible string.
A malformed input domain is rejected free; billing is per completed audit.

Built by 1450 Enterprises, alongside Domain Intel and the DNS Records Audit.

Typosquat & Lookalike Domain Detector with Threat Signals

cottony_brittlegill/domain-typosquat-detector

Find typosquatted and lookalike domains impersonating your brand: typo, homoglyph, bitsquat, TLD-swap and combosquat variants, checked against live registries and enriched with registrar, DNS, MX and TLS data to separate real threats from parked domains. Unregistered variants are never charged.

cottony_brittlegill

OSINT Recon Suite - Unified Digital Footprint Report

ntriqpro/osint-recon-suite

Digital footprint report for one target — username, email, domain or phone. Runs Maigret, Sherlock, holehe, theHarvester, WHOIS and dnstwist in one pass and correlates every hit into a risk-scored OSINT report. Those actors run on your account and bill separately — see README.

daehwan kim

Brand Protection: Counterfeit, Fake Shop & Typosquat Detector

fayoussef/brand-abuse-counterfeit-detector

Find fake webshops, counterfeit marketplace listings, typosquatted domains and impersonation profiles abusing your brand. AI classifies every hit, scores the risk, saves a page snapshot as takedown evidence and tells you which report to file. No API key needed.

youssef farhan

Domain Impersonation Scanner — Typosquat & Phishing Finder

cerridwen/domain-impersonation-scanner

Find domains impersonating your brand. Generates typosquat, combosquat, homograph (punycode) and TLD-swap permutations, checks which are actually registered, then profiles each: mail servers, TLS, live pages, login forms and brand mentions. Returns a 0-100 risk score with takedown steps.

Cerridwen

Scout — Lead Enrichment + OSINT

logical_vivacity/scout

Email finder + lead enrichment + OSINT from public sources. Pass any fragment — name, email, or domain — get a verified dossier: 700+ identity sites, SMTP-validated emails, document mining, sanctions screen, domain→team discovery. $0.05 person, $0.15 domain. No API keys

Logical Vivacity

274

Domain Security & Email Deliverability — DNS, SPF, DMARC, DKIM

ryanclinton/dns-record-lookup

Audit a domain portfolio for email spoofing, broken SPF, DMARC enforcement, DNSSEC and shadow-SaaS senders. Returns a posture score, what to fix first, vendor dependencies and drift alerts — not just records. Bulk DNS / SPF / DMARC / DKIM lookup, no API keys.

Ryan Clinton

WHOIS Domain Lookup: Operational Domain Intelligence

ryanclinton/whois-domain-lookup

Look up WHOIS and RDAP registration data for any domain in bulk. Get registrar details, creation and expiry dates, nameservers, domain age, registrant info, DNSSEC status, and EPP status codes -- all without needing any API key.

Ryan Clinton

Bulk Domain Intelligence: WHOIS/RDAP, DNS, SSL, Availability

cottony_brittlegill/domain-intelligence-bulk

Bulk domain lookup: RDAP/WHOIS registration data, DNS records, SSL certificate and registration availability for up to 100k domains in one normalized JSON per domain. Failed lookups are never charged.

cottony_brittlegill

Bulk Email Health: SPF, DMARC, DKIM & MX Checker

cottony_brittlegill/domain-mailhealth-bulk

Bulk email deliverability and security audit: MX, SPF, DMARC and DKIM (common selectors) for up to 100,000 domains in one normalized JSON per domain, with an A-F grade and actionable issues. Failed lookups are never charged.

cottony_brittlegill

Certificate Transparency Scraper: Subdomain Discovery

arman-bd/certificate-transparency-scraper

Query certificate transparency logs via crt.sh to enumerate subdomains, issuers, validity windows and certificate history for any domain. Passive attack-surface discovery. no login, no proxy, no browser.