Generates character transpositions, additions, deletions, keyboard adjacency swaps, homoglyphs, and TLD variations.
All client-side. Covers transpositions, missing/doubled chars, keyboard adjacency, homoglyphs, and TLD variants.
Generates a list of typosquatting variations for any domain: character transpositions, missing characters, extra characters, homoglyph substitutions, common misspellings, and TLD variations. These are the domain patterns attackers register to impersonate legitimate domains in phishing campaigns.
Typosquatting domains are frequently used for phishing, lookalike login pages, and business email compromise (BEC) attacks where attackers register a domain close enough to your own that recipients don't notice the difference.
Use this tool to identify which lookalike domains should be registered defensively to prevent attackers from using them. Monitor the generated list against domain registration activity to detect when a new lookalike domain appears.
BEC attacks often originate from typosquatted domains where the attacker controls the email infrastructure. A domain registered with valid SPF and DMARC that looks almost identical to yours can pass email security checks while deceiving recipients.