What types of typosquatting does this tool detect?

Our scanner checks 9 attack types: character substitutions (l to 1, o to 0), character insertions, character deletions, adjacent character swaps, Unicode homoglyphs (visually similar characters from other alphabets), TLD swaps (.com to .net), bitsquatting (single bit-flip variants), hyphenation abuse, and subdomain prepending (www-, login-, secure-).

What does it mean if a permutation resolves?

If a domain permutation resolves (has an A record), it means someone has registered that domain and pointed it to a web server. This does not automatically mean it is malicious - it could be a legitimate defensive registration - but active lookalike domains warrant investigation, especially high-risk substitution and homoglyph variants.

How are risk levels determined?

High risk: resolved domains using substitution, homoglyph, or character swap techniques (most commonly used in phishing). Medium risk: resolved TLD swaps and subdomain prepends. Low risk: resolved insertions, deletions, bitsquats, and hyphenation variants. Only domains that actively resolve receive a risk classification.

How can I protect my brand from typosquatting?

Defensive strategies include: registering common misspellings of your domain, monitoring for new lookalike registrations, implementing DMARC to prevent email spoofing from lookalike domains, using brand monitoring services, and reporting malicious domains to registrars and abuse contacts. Vysiro offers continuous monitoring on paid plans.

Free Tool

Free Typosquatting & Brand Protection Scanner

Lookalike (confusable) domains are registrations that are visually or typographically similar to yours. Some are entirely benign; others may be used for phishing or brand abuse. This tool generates hundreds of permutations using 9 techniques - substitution, insertion, deletion, character swaps, Unicode homoglyphs, TLD swapping, bitsquatting, hyphenation, and subdomain prepending - then checks which ones are actively registered via DNS-over-HTTPS. It surfaces registered lookalikes as evidence for you to review; it does not assert that any registrant acted in bad faith.

typosquattingbrand protectiondomain impersonationhomoglyph detectiontyposquat scanner

vysiro.com/tools/typosquat-detector

Generates up to 500 permutations and checks 200 via DNS for active typosquatting domains

What This Tool Detects

9 typosquatting techniques analyzed using DNS-over-HTTPS

Character substitution detection (l/1, o/0, rn/m)

Unicode homoglyph analysis (lookalike characters)

TLD swap detection (.com to .net, .org, .co, etc.)

Adjacent character swap identification

Bitsquatting detection (single bit flip variants)

Hyphenation abuse scanning

Subdomain prepend detection (www-, login-, secure-)

Real-time DNS resolution for each permutation

How It Works

Comprehensive domain permutation analysis in seconds

Enter your domain name in the scanner above

Our engine generates up to 500 permutations using 9 typosquatting techniques

Each permutation is checked via DNS-over-HTTPS to see if it resolves

Active domains are classified by risk level (high, medium, low)

Results are sorted by risk severity with resolved domains first

Frequently Asked Questions

Everything you need to know about typosquatting detection

Typosquatting is when someone registers a domain name that is a common misspelling or visual lookalike of a legitimate domain. Such domains are sometimes used for phishing, malware distribution, or diverting traffic - but a lookalike registration is not proof of bad intent on its own. This tool surfaces registered lookalikes as evidence for you to review and, where warranted, dispute through the domain's registrar.

Related Free Tools

Continue your domain security analysis

Go Beyond Free Checks

Get continuous monitoring, automated fixes, proof packs, and API access. Protect your domains with Vysiro's autonomous trust platform.

Start Free Scan View Pricing

Free Typosquatting & Brand Protection Scanner

What This Tool Detects

How It Works

Frequently Asked Questions

Related Free Tools

DNS Health

DMARC Checker

Blacklist Check

TrustScore

Go Beyond Free Checks