Typosquatting Detector
Detect typosquatting domains using permutation techniques.
GET
/v1/typosquat
curl "https://dns.toolkitapi.io/v1/typosquat?domain=google.com"
import httpx
resp = httpx.get(
"https://dns.toolkitapi.io/v1/typosquat?domain=google.com",
)
print(resp.json())const resp = await fetch("https://dns.toolkitapi.io/v1/typosquat?domain=google.com", {
});
const data = await resp.json();
console.log(data);# See curl example
Response
200 OK
{
"domain": "google.com",
"permutations_generated": 312,
"permutations_checked": 312,
"domains_resolving": 7,
"results": [
{"domain": "gogle.com", "technique": "character-omission", "resolves": true, "ips": ["34.102.136.180"]},
{"domain": "goggle.com", "technique": "character-swap", "resolves": true, "ips": ["185.199.108.153"]},
{"domain": "g00gle.com", "technique": "homoglyph", "resolves": true, "ips": ["104.21.45.67"]},
{"domain": "google.org", "technique": "tld-swap", "resolves": true, "ips": ["52.7.136.132"]}
],
"query_time_ms": 8934.2
}Try It Live
Live Demo
Response
Description
Detect typosquatting domains using permutation techniques.
How to Use
1
1. Pass your domain in the `domain` parameter. 2. Review `domains_resolving` for the number of active typosquatting domains found. 3. Investigate each result — check the IPs and `technique` to assess threat level.
About This Tool
Typosquatting Detector generates domain permutations using multiple techniques — character omission, swap, replacement, bitsquatting, homoglyphs, TLD swaps, and hyphenation — then checks which permutations actually resolve to an IP address. This helps identify phishing and brand impersonation domains.
Why Use This Tool
- Brand protection — Discover domains impersonating your brand
- Phishing detection — Find active phishing domains targeting your users
- Threat intelligence — Monitor for newly registered typosquatting domains
- Domain portfolio — Identify typo domains to defensively register
Frequently Asked Questions
What permutation techniques are used?
Character omission, swap, replacement, bitsquatting, homoglyphs (visually similar Unicode characters), TLD swaps, and hyphenation variations.
Why does this take longer than other endpoints?
Hundreds of permutations are generated and each must be DNS-resolved. Results typically take 5-10 seconds.
Start using Typosquatting Detector now
Get your free API key and make your first request in under a minute.