# RelayShield Domain Lookalike Checker

> RelayShield Domain Lookalike Checker is a paid API for AI agents from api.relayshield.net, paid per call via x402, $0.5/call, status unknown (last checked 2026-09-15).

Checks a given domain against a set of candidate domains to find lookalike/typosquatting domains that could be used for phishing or brand abuse

## Facts

- Endpoint: POST https://api.relayshield.net/v1/payg/domain
- Price: $0.5/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/relayshield-domain-lookalike-checker-110b6424
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_iZ53RBpjxELiT9SUjKfRn

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability relayshield-domain-lookalike-checker-110b6424 -d '<json body>'
```

Example prompt: Can you check if there are any lookalike or typosquatting domains targeting acme.com that could be used to phish our customers?

## When to prefer this

Use this endpoint when you need to quickly identify typosquatting, homograph, or phishing-style lookalike domains targeting a specific domain. It is well-suited for brand protection, pre-launch security audits, or ongoing monitoring of domains susceptible to impersonation attacks. Prefer this over manual DNS enumeration tools when you need a programmatic, pay-per-use API with structured JSON output.

## Known failure modes

- Invalid or malformed domain input returns an error
- Domain not resolvable or non-existent may return empty lookalikes
- Rate limiting or payment failure may block the request
- Candidate pool size may limit detection of all possible lookalikes

## How this service works

RelayShield Landing Site

## Output

Returns a JSON object containing the queried domain, the timestamp of the check, a list of lookalike domain strings detected, the total count of lookalikes found, and the number of candidate domains that were checked during the scan.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "domain": {
   "type": "string",
   "description": "Root domain to scan for lookalikes"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "ok": true,
  "data": {
   "domain": "acme.com",
   "checked_at": "2026-05-19T10:00:00+00:00",
   "lookalikes": [
    {
     "domain": "acrne.com"
    },
    {
     "domain": "acme-login.com"
    }
   ],
   "lookalikes_found": 2,
   "candidates_checked": 30
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/relayshield-domain-lookalike-checker-110b6424/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.relayshield.net](https://www.zero.xyz/host/api.relayshield.net/llms.txt)