# DNS Doctor Lookalike Domain Watch

> DNS Doctor Lookalike Domain Watch is a paid API for AI agents from dnsdoctor.dev, paid per call via x402, $0.5/call, status unknown (last checked 2026-10-29).

Starts a continuous lookalike-domain monitoring watch that periodically scans for typosquatted or look-alike domains targeting a specified domain over a paid time window.

## Facts

- Endpoint: POST https://dnsdoctor.dev/api/v1/watch/lookalikes?utm_source=zero.xyz
- Price: $0.5/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-29
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/dns-doctor-lookalike-domain-watch-cc8ddc45
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_jFXWFNwzC6_hpYRUEM4h9

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability dns-doctor-lookalike-domain-watch-cc8ddc45 -d '<json body>'
```

Example prompt: Can you set up a lookalike domain watch on DNS Doctor for acmecorp.com so I get notified if any typosquatted or impersonator domains show up over the next 24 hours?

## When to prefer this

Choose this endpoint when you need ongoing, periodic surveillance of lookalike/typosquatted domains for a specific target domain over a defined time window, rather than a one-time snapshot. It is ideal for brand protection workflows, phishing defense, and security monitoring pipelines where you need continuous re-checking across a multi-hour window rather than a single instant scan.

## Known failure modes

- Invalid or malformed domain name returns an error or empty response
- Payment failure (insufficient USDC balance or x402 protocol error) prevents watch creation
- Domain already being watched may cause duplicate watch issues
- poll_url becomes inaccessible after expires_at timestamp
- Watch creation may succeed but no lookalikes detected if none exist within the window

## How this service works

Scan, fix and verify your domain&#x27;s DNS: SPF, DMARC and DKIM, global propagation, DNS health and expiry. Deterministic copy-paste fixes, never an AI guess.

## Output

Returns a JSON object containing a watch_id, a poll_url to check results, the target domain, the current state (e.g. 'running'), the monitoring window in hours, the check cadence in seconds, the expiry timestamp, and the price charged. The agent must poll the returned poll_url to retrieve detected lookalike domains as the watch progresses.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "domain": {
   "type": "string"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "kind": "lookalikes",
  "state": "running",
  "target": "example.com",
  "poll_url": "https://dnsdoctor.dev/api/v1/watch/wid_example",
  "watch_id": "wid_example",
  "price_usd": "0.500000",
  "expires_at": "2026-10-02T12:00:00Z",
  "window_hours": 24,
  "cadence_seconds": 3600
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/dns-doctor-lookalike-domain-watch-cc8ddc45/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from dnsdoctor.dev](https://www.zero.xyz/host/dnsdoctor.dev/llms.txt)