typosquatting checker.

Typosquatting (also called URL hijacking or brandjacking) is registering a domain that closely resembles a legitimate one, relying on typos, look-alike characters, or a different extension. The goal is to catch people who mistype a URL or don't look closely, then use the domain for phishing, malware, ad revenue, or email impersonation.

We take the registrable part of your domain and apply the same permutation techniques attackers and tools like dnstwist use: character omission, repetition and transposition, keyboard-adjacent substitutions and insertions, homoglyphs, vowel swaps, hyphenation, TLD swaps, and common phishing affixes. Each generated candidate is then resolved against DNS to see if it's registered.

A candidate is reported as registered when it has an A record (an IP address) or NS records (delegated name servers). That's a strong signal the domain exists and is controlled by someone. A domain with no A and no NS records is almost certainly unregistered or unused.

MX records mean the domain is configured to receive email, a common signal that it is being prepared for email use. They do not prove active sending, but a registered, mail-capable look-alike is higher risk for phishing and business email compromise, so we surface it separately.

First confirm whether it's yours — many companies defensively register common typos and point them at their real site. If it isn't yours, check where it resolves and whether it has mail set up. Genuine impersonation domains can be reported to the registrar and, for trademark abuse, through ICANN's UDRP process. Defensively registering the most convincing variants is often the cheapest protection.

No tool can. We generate a capped set of the most common ASCII permutations, so extremely long names and exotic tricks like internationalized (Unicode) homoglyph domains aren't all covered yet. Treat the results as the high-probability shortlist an opportunistic attacker would reach for first, not an exhaustive audit.