Start with the live form
Enter a domain, URL, IP, email, or record and get a focused result without setup.
🛡 Typosquatting Detector
Find potential typosquatting threats to your domain
Generating typo permutations...
Potential Typosquatting Domains (0)
API Endpoint
GET /v1/typos?domain=example.com
Interactive intelligence tool
Run the check, then ship the workflow
Use the browser tool for a fast answer, then move the same logic into scripts, monitoring, or product flows when it becomes repeatable.
Review decision-ready signals
Outputs highlight statuses, risks, records, and next actions instead of raw provider noise.
Automate the winning workflow
Use the request and response examples to turn a one-off check into an API call or recipe.
Used by people at amazing companies
What this tool helps you decide
Each page is shaped around a practical operational question, not just a raw lookup.
See the current DNS, registration, security, pricing, or reputation evidence.
Compare the result with related checks so the next move is easier to trust.
Copy examples, open linked tools, or move into API documentation when you need scale.
Trust signals before you integrate
Transparent docs, authenticated requests, and visible reliability details make it easier to evaluate DomScan before you ship.
Uptime
API artifacts
OpenAPI, Swagger, Postman, CLI, SDK, and MCP links are one click away.
API keys
Protected access
Authenticated endpoints use API keys with clear credit costs before you call them.
Free allowance
Sign Up for Free
Start with 10,000 monthly credits and upgrade only when usage grows.
Active
Example Request
Start from the curl and HTTP samples, then map the parameters into your application code.
Key Features
Typosquatting Detector
We generate 10+ variation types: keyboard adjacency typos (gogle.com), character swaps (goolge.com), missing letters (gogle.com), doubled letters (googgle.com), homoglyphs (g00gle.com using zeros), bit-flipping attacks, TLD variations (.co instead of .com), hyphen insertion, and IDN/punycode lookalikes using unicode characters that appear identical.
Detect Typosquats
Best practices include: 1) Proactively register common typos of your domain, 2) Monitor for new typosquatting registrations using our watchlist feature, 3) File UDRP complaints for infringing domains, 4) Implement DMARC email authentication to prevent spoofing, 5) Educate users about official domain. Use our social handle checker to secure matching usernames.
Domain Watchlist
Yes! Use GET /v1/typos?domain=example.com&check_registered=true to find currently registered typos. Add high-risk variations to your watchlist for ongoing monitoring. The API also provides a typosquatting protection score showing how vulnerable your domain name is based on its characteristics. Perfect for security teams and brand protection services.
Example Request
GET /v1/typos?domain=example.com&check_registered=trueExample Response
{
"threat_level": "high",
"registered_typos": [
{ "domain": "exampel.com", "risk": "high" }
]
}Built from the same API surface
The browser experience previews DomScan's structured endpoints, so teams can validate a use case before writing code.
Frequently Asked Questions
What is typosquatting and why is it dangerous?
Typosquatting (URL hijacking) is when attackers register domains similar to popular brands using common misspellings. These domains capture traffic from typos and are used for phishing attacks, malware distribution, credential theft, ad fraud, and brand impersonation. A single typosquatting domain can compromise thousands of users who mistype your URL.
What types of domain variations does this tool detect?
We generate 10+ variation types: keyboard adjacency typos (gogle.com), character swaps (goolge.com), missing letters (gogle.com), doubled letters (googgle.com), homoglyphs (g00gle.com using zeros), bit-flipping attacks, TLD variations (.co instead of .com), hyphen insertion, and IDN/punycode lookalikes using unicode characters that appear identical.
How can I protect my brand from typosquatting?
Best practices include: 1) Proactively register common typos of your domain, 2) Monitor for new typosquatting registrations using our watchlist feature, 3) File UDRP complaints for infringing domains, 4) Implement DMARC email authentication to prevent spoofing, 5) Educate users about official domain. Use our social handle checker to secure matching usernames.
What should I do if I find a typosquatting domain?
Actions depend on the threat: For phishing/malware sites, report to Google Safe Browsing and your registrar. For trademark infringement, file a UDRP complaint or send a cease-and-desist. For parked domains, consider purchasing them. Document everything with screenshots. Check domain reputation and WHOIS to understand who registered it and when.
Can I monitor for new typosquatting threats automatically?
Yes! Use GET /v1/typos?domain=example.com&check_registered=true to find currently registered typos. Add high-risk variations to your watchlist for ongoing monitoring. The API also provides a typosquatting protection score showing how vulnerable your domain name is based on its characteristics. Perfect for security teams and brand protection services.