utilitybelt.dev
Sponsored

DNS Typosquat Scanner

Scan for typosquatting and similar domains - generate variants and check DNS resolution to find potentially malicious domains.

This tool generates common typosquatting variants and checks their DNS status using Google DNS-over-HTTPS.

Sponsored

What is DNS Typosquat Scanner?

Typosquatting, also known as URL hijacking, is a form of cybersquatting that relies on typographical errors made by Internet users when inputting a website address into a browser. Malicious actors register these misspelled domains (like replacing 'm' with 'rn' or swapping adjacent letters) to deceive users. These fraudulent sites are often used for phishing campaigns, malware distribution, or intercepting sensitive emails. A Domain Typo Generator systematically applies common error algorithms—such as character omission, transposition, replacement, and insertion—to a target domain. By proactively generating and monitoring these permutations, security teams and brand owners can identify and block or register risky domains before they are weaponized against their customers.

Common Use Cases

  • Brand Protection: Securing common misspellings of your company's primary domain to prevent brand dilution or fraud.
  • Penetration Testing: Identifying potential phishing domains that could be used in social engineering engagements.
  • Security Operations: Monitoring newly registered domains that closely match corporate assets to update threat intelligence blocklists.

Example: Input & Output

Sample Input

See the tool above for interactive examples.

Expected Output

The processed output will appear here instantly.

How to Use

  1. Step 1: Enter your primary domain name (e.g., example.com) into the input field.
  2. Step 2: Select the types of variations to generate (e.g., omissions, homoglyphs, substitutions).
  3. Step 3: Review the generated list and optionally check their DNS resolution status.

Frequently Asked Questions

What algorithms are used to generate the typos?

The tool uses standard algorithms including character omissions, duplications, homoglyph substitutions (e.g., 'l' instead of 'I'), and adjacent keyboard key replacements.

Does this tool check if the domains are registered?

The generator creates the list, and you can click on each variation to perform a live DNS lookup to see if it resolves to an IP address.

How many variations can be generated?

Depending on the length of the domain, it can generate anywhere from dozens to thousands of permutations.

Privacy & Security

All data processing for the DNS Typosquat Scanner happens entirely on your local machine within your browser. No data is ever sent to our servers, ensuring your information remains private and secure. We believe in privacy by design, and our tools are built to be used without compromising your data.