Discover domains that could be used for phishing, typosquatting, or brand impersonation targeting your domain.
Generates permutations using omission, transposition, replacement, insertion, homoglyph, hyphenation, and more.
WHOIS, DNS, Safety Check, and more to analyze a domain across multiple dimensions.
What is Typosquatting
Typosquatting is the practice of registering domain names that closely resemble an established domain: a swapped letter, a missing character, a lookalike glyph, or the same name on a different extension. These lookalike domains are commonly used for phishing, traffic interception, and brand impersonation.
The Typosquat Scanner generates permutations of your domain across 11 mutation types and checks which ones are currently registered. A registered lookalike is worth investigating further, while an available one is an opportunity to register defensively before someone else does.
How to Read the Results
Each result shows the permutation, which extension it uses, how many TLD extensions that name exists on, the mutation type, and its registration status. For any registered lookalike, run a WHOIS lookup to see its registration dates and status codes, check its DNS records to see whether it resolves to live infrastructure, and run a safety check to see if it has been flagged as unsafe. To check one name across 1,200+ extensions at once, use Bulk TLD Check.
Defensive Registration
Most brands cannot register every permutation, and they do not need to. Prioritize the variants with the highest confusion risk: single-character typos of your exact name, homoglyph lookalikes, and your exact name on major extensions such as .com, .net, .org, .io, and .ai. Securing high-risk variants while they are still available is typically far cheaper than recovering them later.
Frequently Asked Questions
What is a Domain Permutation Scanner?
A domain permutation scanner generates variations of a domain name using common typo and impersonation patterns. It then checks each variation against domain databases to see if it is registered, helping you spot potential phishing or typosquatting threats.
What mutation types are used?
The scanner uses 11 mutation types: character omission, transposition (swap), keyboard-adjacent replacement, character insertion, repetition (doubling), hyphenation, vowel swap, homoglyph substitution, plural/singular variation, exact-match TLD checks, and common TLD swaps.
Do I need an account?
Guest users can run 1 scan per day with up to 20 results shown. Creating a free account gives you 3 scans per day with full results. Lite and Premium members get higher daily limits.
How is registration status checked?
Each permutation is checked against domain registration databases. Domains are classified as registered, available, or expired. Results stream in as they are verified.