Overview
Finds lookalike domains of a brand (typos, homoglyphs, TLD swaps, added words like -airdrop), checks which exist, and reads their registry record, live certificate and homepage. Each finding has a 0-100 risk score, plain reasons and hashed evidence. POST /v1/brand/scan, /v1/brand/lookalikes, /v1/brand/evidence. Detection only, not a finding of fraud.