Typo-squatting Detector
Generate common typo and TLD variants of a domain, then check which are actually registered. Brand-protection use case.
Generate common typo and TLD variants of a domain, then check which are actually registered. Brand-protection use case.
This free Typo-squatting Detector from KX Toolkit is part of our all-in-one online toolkit. It runs entirely in your browser, so your data never leaves your device for client-side operations. 100% free, forever - no paywall, no credit card, no trial.
How to use the Typo-squatting Detector
- Enter the domain or IP address.
- Pick the record type if the tool supports filtering.
- Run the lookup - most checks return in under a second.
- Copy the records for your DNS migration or audit notes.
What you can do with the Typo-squatting Detector
- Audit DNS before a domain migration.
- Verify SSL certificate expiry and chain.
- Check domain age and history before buying.
- Diagnose email-delivery issues (SPF, DKIM, DMARC).
Why use KX Toolkit's Typo-squatting Detector
- Browser-based: Works on Windows, macOS, Linux, iOS and Android - no install, no extension.
- Privacy-first: Client-side tools never upload your data; server-side tools delete files right after processing.
- Mobile-friendly: Full feature parity on phones and tablets - not a stripped-down view.
- Fast: Optimised for instant feedback. No artificial waiting screens, no email-gated downloads.
- One hub for everything: 300+ tools across SEO, text, image, PDF, code, color, calculators and more - skip switching between sites.
Tips for the best results
DNS changes propagate at different speeds across resolvers - run the same check from Google (8.8.8.8) and Cloudflare (1.1.1.1) before declaring a problem.
Related Domain Tools
If you find this tool useful, explore the full Domain Tools collection or browse our complete tool directory. KX Toolkit is built for marketers, developers, designers, students and anyone who needs a quick utility without signing up for yet another SaaS.
How does the typo-squatting detector generate variants?
It applies seven well-known squatting patterns to your domain's second-level label. (1) Missing-letter - drop one character at each position. (2) Doubled-letter - repeat one character. (3) Swapped-letter - swap each adjacent pair. (4) Adjacent-key - replace each character with a QWERTY-keyboard neighbour. (5) Homoglyph - swap visually similar characters like 0/o, 1/l, rn/m. (6) Hyphenation - insert a hyphen at common positions. (7) TLD swap - keep the label, swap the extension to the 10 most common alternatives.
Why are variants capped at 50?
For a 7-character domain like google.com the brute-force product of all variant types is over 200 candidates, and each one needs a DNS lookup. Capping at 50 keeps the scan under 15 seconds even on shared hosting, while still surfacing the highest-risk patterns (TLD swaps and adjacent-key typos are checked first). For a deeper sweep, run the tool against multiple variants of your domain or use a paid brand-protection service.
What does "Registered" really mean?
It means the variant has at least one DNS A record - i.e. someone has bought it and pointed it at a server. It does not necessarily mean the owner is malicious. Many brands defensively register their own typo variants. Always cross-check WHOIS to see who actually owns a flagged domain before assuming squatting; if it's your own holding company, you're fine.
Can a domain be squatted without DNS records?
Yes - registered but unconfigured (parked) domains may have no A record yet still be owned. Our scan would mark these as "Available" because we only check DNS resolution, not WHOIS registration. To catch parked domains too, use a paid WHOIS bulk-query API - it's slower (and rate-limited) but more thorough. Our tool is meant as a free first-pass that flags domains actively in use.
I see a homoglyph variant flagged, what should I do?
Homoglyph squats (using 0 instead of O, 1 instead of l, "rn" instead of "m") are the highest-risk pattern because they fool human eyes in emails and browser address bars. If a homoglyph variant is registered and not by you, escalate immediately: WHOIS-lookup the owner, check what site is actually served, and consider filing a UDRP complaint with ICANN if the domain mimics your brand and serves competing content or phishing pages.
Is one DNS A-record check enough to confirm registration?
It's a strong signal but not the only one. Some legitimately registered domains have no A record (only NS records, or a CNAME, or MX-only for email). Our tool conservatively flags only domains with active A records, so it under-reports rather than over-reports. If you need a complete registration check, use a WHOIS query - but be aware many registries throttle anonymous WHOIS requests, which is why most free typo-squatting tools rely on DNS instead.
No reviews yet
Be the first to share your experience with the Typo-squatting Detector.