Free Domain Typosquatting Checker

Typosquatting is the practice of registering domain names that are misspellings or visual lookalikes of legitimate brand domains, then using them for phishing, malware delivery, ad fraud, or brand impersonation. Typosquatting is also called URL hijacking. Users land on a typosquatting domain when they mistype the legitimate URL in a browser.

Cybersquatting is the broader practice of registering domains that match someone else's trademark, brand, or name, often for resale or extortion. Typosquatting is a subset of cybersquatting focused specifically on misspelled or visually similar versions of a target domain. Most modern typosquatting registrations are used for phishing rather than resale.

In the United States, typosquatting that exploits a registered trademark is actionable under the Anticybersquatting Consumer Protection Act (ACPA), with statutory damages from $1,000 to $100,000 per domain. Trademark owners can also file a UDRP complaint with ICANN-accredited dispute providers to recover the domain. Laws vary by country, so consult counsel for local enforcement.

The typosquatting checker generates character omissions, insertions, substitutions, and transpositions, keyboard-adjacent typos, vowel swaps, repetitions, hyphenations, ASCII homoglyphs (such as g00gle), IDN Punycode homoglyphs (such as Cyrillic lookalikes), TLD swaps (.com to .co, .net, .org), and subdomain-style variants (such as login-yourbrand.com). All variants are checked against the registered database.

WhoisFreaks ingests newly registered domain data continuously. A newly registered typo variant typically appears in the lookup index within 24 to 48 hours of registration. Daily or weekly scans against high-value brand terms catch typo registrations the same week they are created.

Common next steps: file a UDRP complaint with an ICANN-accredited dispute provider, send a registrar takedown request, file an ACPA action for U.S. trademarks, add the domain to email and DNS blocklists, register adjacent variants defensively, and feed the registrant details from the WHOIS Lookup into a watchlist for ongoing monitoring of the same actor, and check whether the same registrant owns other suspicious domains via Reverse WHOIS.