# LookalikeGuard

> LookalikeGuard finds registered lookalike, typosquat and impersonation domains of a brand (for example examp1e.com or example-login.com for example.com), scores each one 0-100 by risk with the reasons shown, and monitors for new ones. It is monitoring and early warning only: no takedowns, no legal advice. Results are automated and can contain mistakes.

## What it does
- Free one-time scan, no sign-up: generates typos, look-alike characters (homoglyphs/IDN), other extensions (TLD swaps), bitsquats and added words like "login" or "support", then checks which are registered.
- Uses public data only: DNS, registration (RDAP) records, public certificate transparency logs and each domain's public web page.
- Risk score 0-100 per finding with reasons (recent registration, mail servers, login form, copied page title or icon, fresh TLS certificate).
- Paid monitoring: certificate transparency log watch, daily re-scan, follow-up checks at 1, 7 and 30 days, email alerts or daily digest, signed webhooks, CSV export, JSON API, monthly summary.

## Who it is for
Online stores, local businesses, SaaS companies, agencies and MSPs: anyone whose customers pay, log in or take email from their domain.

## Pricing (USD)
- Free: one-time scans (per-IP limits), no card.
- Solo: $9/month or $90/year; monitors 1 domain; 20 on-demand scans/day; API 60 requests/min
- Team: $29/month or $290/year; monitors 5 domains; 100 on-demand scans/day; API 120 requests/min
- Agency: $79/month or $790/year; monitors 25 domains; 500 on-demand scans/day; API 300 requests/min
- Yearly = pay for 10 months, get 12. Cancel any time. Payments by Stripe.

## How an agent can run a scan for a user
- No key needed: GET https://lookalikeguard.com/api/v1/scan?domain=example.com (JSON; waits up to ~150 s, else HTTP 202 with an id to poll at /api/v1/results/{id}). Per-IP rate limit; HTTP 429 when exceeded; results under 1 hour old are reused.
- Human-readable alternative: send the user to https://lookalikeguard.com/ and have them enter the domain; results get a shareable /r/<id> link.
- OpenAPI spec: https://lookalikeguard.com/openapi.json (same as /api/openapi.json). Interactive docs: https://lookalikeguard.com/api/docs
- With a user's API key (Authorization: Bearer ...): monitored domains, findings since a timestamp, feedback, webhook test.
- Monitoring requires the user to sign in and pay; agents should not sign up or pay on a user's behalf without the user's approval.

## Key pages
- [Home and free scan](https://lookalikeguard.com/)
- [Pricing](https://lookalikeguard.com/pricing)
- [How it works](https://lookalikeguard.com/how-it-works)
- [For AI agents](https://lookalikeguard.com/for-ai-agents)
- [Case studies and 2025-2026 data](https://lookalikeguard.com/lookalike-domain-case-studies)
- [What to do about a fake domain](https://lookalikeguard.com/what-to-do-about-a-fake-domain)
- [API for developers](https://lookalikeguard.com/api-for-developers)

## Contact
hello@lookalikeguard.com · LookalikeGuard, 456 Glenbrook Rd #650, Stamford, CT 06906, USA

## All guides
- [Lookalike domain checker](https://lookalikeguard.com/lookalike-domain-checker)
- [Typosquatting monitor](https://lookalikeguard.com/typosquatting-monitor)
- [Brand impersonation monitoring](https://lookalikeguard.com/brand-impersonation-monitoring)
- [Homoglyph domain checker](https://lookalikeguard.com/homoglyph-domain-checker)
- [Lookalike domain monitoring for agencies](https://lookalikeguard.com/for-agencies)
- [Lookalike domain API for developers and agents](https://lookalikeguard.com/api-for-developers)
- [Combosquatting checker](https://lookalikeguard.com/combosquatting-checker)
- [IDN and punycode domain checker](https://lookalikeguard.com/idn-punycode-domain-checker)
- [Has someone registered a misspelling of my domain?](https://lookalikeguard.com/check-if-someone-registered-my-domain-typo)
- [Lookalike domains with mail servers (MX)](https://lookalikeguard.com/lookalike-domain-mx-records)
- [Certificate Transparency brand monitoring](https://lookalikeguard.com/certificate-transparency-brand-monitoring)
- [Parked vs live lookalike domains](https://lookalikeguard.com/parked-vs-live-lookalike-domains)
- [Why newly registered lookalikes matter more](https://lookalikeguard.com/new-domain-registration-age-risk)
- [TLD swap checker](https://lookalikeguard.com/tld-swap-domain-checker)
- [Bitsquatting explained](https://lookalikeguard.com/bitsquatting-explained)
- [Lookalike domain reports for clients](https://lookalikeguard.com/lookalike-domain-report-for-clients)
- [Lookalike domain research: what we found scanning 47 brands](https://lookalikeguard.com/lookalike-domain-research)
- [Lookalike domain case studies](https://lookalikeguard.com/lookalike-domain-case-studies)
- [What to do about a fake domain](https://lookalikeguard.com/what-to-do-about-a-fake-domain)
- [LookalikeGuard for AI agents and assistants](https://lookalikeguard.com/for-ai-agents)
- [Terms](https://lookalikeguard.com/terms)
- [Privacy](https://lookalikeguard.com/privacy)
- [Refunds](https://lookalikeguard.com/refund)

## API summary
- GET /api/v1/scan?domain=&wait=true : one-time scan (key optional)
- GET /api/v1/results/{id} : scan result (public, like /r/<id>)
- GET /api/v1/me, GET/POST /api/v1/domains, DELETE /api/v1/domains/{domain} : account and monitored domains (key)
- GET /api/v1/findings?since=<unix>&min_score=60, GET /api/v1/findings/{id}, POST /api/v1/findings/{id}/feedback : findings (key)
- POST /api/v1/webhooks/test : signed test event (key)
Webhooks carry LookalikeGuard-Signature: t=<unix>,v1=<hex HMAC-SHA256 of "<t>.<raw body>">.
Responses include X-RateLimit-Limit and X-RateLimit-Remaining.

## Scan result fields (when status is done)
Each finding has the lookalike domain, a 0-100 score, a level and the list of reasons behind the score. Exact fields are in the OpenAPI spec and in a live response.