Scan a domain for active phishing lookalikes

Generates typosquat, homoglyph and phishing-prefix permutations, keeps the ones that actually resolve, then enriches each with Safe Browsing status, registration age and Certificate Transparency activity. A lookalike registered in the last 30 days with a fresh certificate is being stood up right now.

Billing. $0.30 per successful call. Failed calls are never billed. Charged against prepaid credits when the balance covers it, otherwise metered to your card. Threat Intelligence subscribers and AWS Marketplace bundle customers call this at no extra charge.

Note. Enrichment is bounded to 15 seconds. A lookalike whose enrichment does not finish in time is still returned, with its enrichment fields set to null rather than omitted -- null means unknown here, never 'clean'.