Who it is for
Use bounded passive checks to enrich triage and investigation, not to replace authorized testing or human review.
What you get
Detect typosquatting threats and similar domains that could be used for phishing or brand abuse.
SynchronousRESTMCPSDKInteractive tool
Choose this product when
Choose this product when
Choose this to generate likely lookalike variants and check their domain status without treating unknown as safe.
What you get
Detect typosquatting threats and similar domains that could be used for phishing or brand abuse.
Endpoints
Review the supported operations, inputs, outputs, execution modes, and response limits before integrating.
Credits and authentication
2-18 Authentication required. Check the operation reference for the exact cost and any per-item pricing.
Example operation
Use documented operations to collect, assess, enrich, verify, compare, protect, or monitor public evidence.
GET
/v1/typos
Query Parameters
| Parameter | Type | required |
|---|---|---|
| domain | string | required |
| check_registered |
boolean
Default
false
|
optional |
| limit |
integer
Default
100
|
optional |
| include_tld_swap |
boolean
Default
true
|
optional |
Response Fields
| Field | Type |
|---|---|
domain |
string |
name |
string |
tld |
string |
permutations_generated |
integer |
permutations_checked |
integer |
registered_typos[] |
object[] |
registered_typos[] |
object |
registered_typos[].domain |
string |
registered_typos[].type |
string |
registered_typos[].risk |
string |
registered_typos[].registered |
boolean |
registered_typos[].checked_at |
string |
available_typos |
integer |
unknown_typos |
integer |
risk_summary |
object |
risk_summary.critical |
integer |
risk_summary.high |
integer |
risk_summary.medium |
integer |
risk_summary.low |
integer |
threat_level |
string |
family_summary |
object |
family_summary.generated_by_type |
object |
family_summary.generated_by_risk |
object |
family_summary.registered_by_type |
object |
family_summary.registered_by_risk |
object |
family_summary.top_generated_family |
string | null |
family_summary.top_registered_family |
string | null |
family_summary.critical_or_high_generated_count |
integer |
family_summary.critical_or_high_registered_count |
integer |
family_summary.coverage_ratio |
number |
family_summary.checked_count |
integer |
family_summary.available_count |
integer |
family_summary.unknown_count |
integer |
family_summary.omitted_count |
integer |
family_summary.include_tld_swap |
boolean |
family_summary.requested_limit |
integer |
checked_at |
string |
Example Request
curl -H "X-API-Key: $DOMSCAN_API_KEY" "https://domscan.net/v1/typos?domain=google.com&check_registered=false&limit=25&include_tld_swap=true"Example Response
{
"domain": "google.com",
"name": "google",
"tld": "com",
"permutations_generated": 100,
"permutations_checked": 95,
"registered_typos": [
{
"domain": "gooogle.com",
"type": "extra_char",
"risk": "high",
"registered": true
},
{
"domain": "goggle.com",
"type": "char_swap",
"risk": "critical",
"registered": true
}
],
"available_typos": 50,
"risk_summary": {
"critical": 2,
"high": 5,
"medium": 10,
"low": 28
},
"threat_level": "high",
"checked_at": "2024-01-15T12:00:00Z"
}Limits and evidence boundaries
Heuristic signals are useful for ranking or review but are not authoritative proof.
Confidence describes evidence strength for the reported observation, not certainty about the real-world entity.
Partial means some requested items or components completed while others did not.
Cached indicates that stored evidence was used; review freshness metadata where provided.
An absence or unknown result does not prove that an identifier can be claimed or registered.
Reviewed 2026-08-22
Frequently asked questions
Where can I find the Typosquatting Detection request and response reference?
Use the API reference for Typosquatting Detection to review parameters, response fields, examples, status codes, and supported operation modes.
How should I interpret unknown or incomplete results from Typosquatting Detection?
Unknown or partial results mean that the requested evidence could not be fully determined. Keep the result state, confidence, freshness, and limitations in downstream decisions.
How is Typosquatting Detection priced?
Pricing depends on the operation and execution mode. Check the endpoint reference for the current credit cost, authentication requirement, and per-item rules.
