Every popular domain name has hundreds of plausible misspellings. Attackers register these typosquatting domains to intercept traffic from users who mistype a URL, using them for phishing, malware distribution, or ad fraud. Generating a comprehensive list of typos before launch — and registering the most dangerous variants — is a low-cost way to close off this attack surface before it is exploited.
This tool applies four mutation types. Substitution replaces each character with physically adjacent keys on a QWERTY keyboard — the most common source of fat-finger errors. Omission removes one character at a time, simulating fast-typing slips. Duplication doubles a character, catching stuck-key behaviour. Transposition swaps two adjacent characters, which research identifies as the single most common human typing error.
Domain extensions (.com, .net, .org, .io) are stripped before generating variants, so "myapp.com" and "myapp" produce the same results. The tool also works on plain words — useful for QA engineers testing input validation, security researchers performing fuzzing, and SEO analysts comparing query variants for the same keyword.
Frequently Asked Questions
What is a typo generator used for?+
Common uses include: domain typosquatting defense (registering common misspellings of your own domain before others do), phishing detection (identifying lookalike domains targeting your users), QA testing of input validation, SEO analysis of query variants, and fuzzing testing for security research.
What is QWERTY-adjacent substitution?+
This replaces each character with the keys physically adjacent to it on a QWERTY keyboard. For example, s is adjacent to w, e, d, x, z, a. This simulates the most common "fat finger" typing errors where a user hits a neighboring key instead of the intended one.
What is a transposition typo?+
A transposition swaps two adjacent characters — for example, typing "teh" instead of "the." Research shows transpositions are the single most common human typing error, because the fingers for adjacent keys are triggered in the wrong order under time pressure. The tool generates all single-transposition variants.
Does the tool strip domain extensions like .com?+
Yes. Common TLDs (.com .net .org .io .co .app .dev .ai) are stripped before generating variants, so entering myapp.com and myapp produce the same results. The output shows only the domain stem — add your preferred TLD when registering.
Related Tools
How to use
- Enter any word or domain name (e.g.
stripeormyapp.com). - Substitution swaps each letter for keyboard-adjacent keys on a QWERTY layout.
- Omission removes one letter at a time — catches "fast typing" errors.
- Duplication doubles a letter — catches stuck-key typos.
- Transposition swaps adjacent letters — the most common human typo.
- Click Copy all to copy the full variant list to your clipboard.