curl "https://domscan.net/v1/typos?domain=google.com&limit=50"
Example Response
{
"domain": "google.com",
"permutations_generated": 50,
"permutations_checked": 50,
"registered_typos": [
{
"domain": "gooogle.com",
"type": "repetition",
"description": "Letter repetition: o → oo",
"risk": "high",
"registered": true
},
{
"domain": "googIe.com",
"type": "homoglyph",
"description": "Lookalike character: l → I",
"risk": "critical",
"registered": true
},
{
"domain": "gogle.com",
"type": "omission",
"description": "Missing letter: o",
"risk": "high",
"registered": true
}
],
"threat_level": "critical",
"risk_summary": {
"critical": 2,
"high": 8,
"medium": 15,
"low": 12
}
}
Key Features
Typo Detection
Find common typing mistakes like missing/swapped letters.
Homoglyph Analysis
Detect lookalike character attacks (rn→m, l→I, 0→O).
Letter Repetition
Catch domains with doubled letters (gooogle, amazzon).
Adjacent Keys
Detect keyboard proximity typos (foogle, hoogle).
Risk Scoring
Critical, high, medium, and low risk classifications.
Registration Status
Check which typo domains are actually registered.
Threat Summary
Get an overall threat level and risk breakdown.
Permutation Types
Omission, addition, replacement, transposition, and more.
Frequently Asked Questions
Typosquatting is when someone registers domains that are misspellings or visual lookalikes of popular brands. These are often used for phishing, ad fraud, or brand impersonation attacks.
We detect: character omission (gogle), addition (googgle), substitution (goggle), transposition (googel), adjacent key errors (foogle), homoglyphs (googIe with capital I), and bitflip domains.
Critical: homoglyphs and highly deceptive typos. High: common misspellings likely to catch users. Medium: less common errors. Low: unlikely typos but still worth monitoring.
Absolutely! Run regular typosquatting scans to detect new registrations that might be targeting your brand. Take action on critical and high-risk domains.
Scan for Typosquatting Threats
Start for free with 10,000 credits per month. Start checking domains in seconds.
View Full API Documentation