Domain Typo Generator: Free Typosquat List

A domain typo generator lists the misspelled versions of a domain name that people are likely to type by mistake. Enter a domain, choose which typo types to include, and this free tool returns a list you can copy or export, so brand owners and security teams can decide which lookalike domains to register, monitor or report.

What Is Domain Typosquatting and Why Do Typos Matter?

Domain typosquatting is the practice of registering a misspelled version of a popular domain, such as mybrnad.com for mybrand.com, to catch visitors who mistype the address. Squatters use these domains for ad pages, affiliate redirects, fake login forms or malware. You do not need to be a big brand to be affected, because any site with steady direct traffic has mistyped visits.

Typosquatting is often confused with two related threats. Domain hijacking means taking control of a domain someone else already owns, usually by stealing registrar account access. Domain spoofing means impersonating a domain, for example in an email sender address or on a lookalike site. Typosquatting needs no access to your accounts: the squatter simply registers an address you never did.

The Six Typo Types the Tool Generates

Each type below changes only the name before the extension, so the .com, .net or other ending stays as you entered it.

• Omission: removes one character at a time (mybrand becomes mybrnd).
• Adjacent Keys: replaces a character with a neighboring key on a QWERTY keyboard, including digits (the letter d becomes s, e, r, f, c or x).
• Transposition: swaps two neighboring characters (mybrand becomes mybrnad).
• Doubling: repeats one character (mybrandd).
• Insertion: adds a key that sits next to the characters around that position, the way a finger slips onto the wrong key.
• Hyphenation: adds a hyphen between two characters (my-brand).

How to Use the Domain Typo Generator

You can build a full typo list in under a minute by following these steps.

1. Type your domain into the Domain Name field, for example example.com. Use the bare domain with its extension, without https:// or a page path.
2. Leave all six boxes ticked for a complete list, or untick the types you do not need: Omission, Adjacent Keys, Transposition, Doubling, Insertion and Hyphenation.
3. Click Generate Typos.
4. Check the line that reads how many typos were generated for your domain, then scan the table. It has four columns: #, Typo Domain, Type and Description.
5. Use the tabs above the table to filter by one typo type. Each tab shows how many results it holds.
6. Click Copy All, Export CSV or Export TXT to take the list into a spreadsheet, a registrar search or a monitoring workflow.

Worked Example: What Does the Tool Return?

For a short test input like cat.com, the tool returns 46 unique typo domains, and the numbers show how each type contributes. The name has three letters, and the extension stays .com.

• Omission: 3 (at.com, ct.com, ca.com)
• Adjacent Key: 12 (for example xat.com, cqt.com, car.com)
• Transposition: 2 (act.com, cta.com)
• Doubling: 3 (ccat.com, caat.com, catt.com)
• Insertion: 24
• Hyphenation: 2 (c-at.com, ca-t.com)

Add them up and you get 46. Now picture mybrand.com. The Description column explains each row in plain words, such as Swapped a and n at positions 5-6 for mybrnad.com, or Hyphen inserted after position 2 for my-brand.com. Longer names produce longer lists, because every extra character adds more omission, substitution, doubling and insertion options. A name of ten or more characters can easily return a few hundred rows, so filtering by tab matters.

How to Read the Results and What to Do Next

Every row is a possible mistake, not a confirmed threat, so the job is to rank the rows by how likely a real person is to type them. Start with the types that match common human error, then work down.

This ordering is a practical judgment, not a rule. Your own data should override it: if your analytics or server logs show 404 errors or referrals from a specific misspelling, move that row to the top.

Turning the List Into a Plan

Paste the exported list into the domain availability checker (it tests up to 20 names at once) to learn which typos are still free to register. For names that are already taken, run them through the suspicious domain checker for a risk rating. The domain age checker shows when a lookalike was registered, which helps you tell an old, unrelated site from a fresh copycat. Register the few that match real traffic, point them at your main site with a permanent redirect, and keep watching the rest.

Who Should Use a Domain Typo Generator?

Anyone who owns a domain people type by hand can use a typo list, and these are the most common situations.

• Brand and security teams build a watchlist of lookalike domains to monitor for phishing or fake storefronts.
• Small business owners grab two or three obvious misspellings of a new domain before launch.
• Agencies include a typo audit in a client's brand protection checklist.
• Domain investors and researchers study how squatting patterns work around a well-known name.
• Founders choosing a name test whether a candidate is easy to mistype. If a name returns many plausible typos that are already registered, consider another one with the keyword domain finder.

Best Practices, Common Mistakes and Troubleshooting

The tool is simple, but a few habits make the output far more useful.

Best Practices

• Run the list for each extension you care about. Typos are built on the extension you type, so run example.com and example.net separately, and use the domain extension compare page to decide which endings are worth defending.
• Do not register every row. Prioritize short, plausible mistakes over odd insertions, and weigh the yearly renewal cost against likely traffic.
• Save the exported CSV with the date. When you review it later, new registrations on old rows stand out.

Common Mistakes

• Pasting a full URL. Entering https://www.example.com/page fails validation and shows the empty-results message. Enter only the domain.
• Entering a name with no extension. A value like example is not a valid domain, so nothing is generated.
• Entering a subdomain such as blog.example.com. The tool treats everything before the last dot as the name, so the dot itself gets altered in some rows. Use your main domain instead.

If You See No Results

When the page says No typos generated. Please enter a valid domain name., check for spaces, a missing extension, or characters other than letters, numbers and hyphens. Also confirm at least one typo type box is ticked, because with all boxes cleared there is nothing to generate.

Limitations to Keep in Mind

This generator creates candidates, and it does not tell you who owns them. It does not check whether a typo domain is registered, available or malicious, so pair it with an availability or reputation check. It does not swap the extension (example.co or example.net), replace letters with lookalike characters such as rn for m, or invent phonetic respellings. Adjacent keys follow the standard QWERTY layout, so typos common on other keyboard layouts may not appear. For extensions with two parts, such as .co.uk, only the last part is treated as the extension, so some rows will change the .co portion and need a manual look.

Use the domain typo generator above to build your list, filter it by type, and export it for the next step. You can find more lookup and research utilities in the domain tools category.