FAQ
Frequently asked questions
What a check costs, what it looks at, what it keeps and what it cannot tell you. Every rule behind a result is published on the methodology page.
Typosquatting uses small variations of a legitimate domain name to catch mistyped addresses or impersonate a brand. It can involve missing letters, repeated characters, or a different domain ending.
Nothing, and no account is needed. You can generate domain variations and check public registration and DNS signals straight from the home page; each check generates thousands of candidate names and reports the ones that are registered. Paid plans add a watchlist, daily re-checks and email alerts; see the pricing page.
No. Similar domains may belong to unrelated businesses, be parked, or be owned by your own organization. Risk levels prioritize human review; they do not confirm phishing or malicious intent.
Verify whether your organization owns it. Review the registration and DNS evidence, preserve relevant records, and involve your security team. Avoid opening an unfamiliar website or entering credentials.
Checks query public DNS, certificate logs and registration services at the time you run them. A finished public report is kept for 24 hours and served to anyone who checks the same domain in that time; add ?fresh=1 to the results address to run it again. Registry delays, redacted records, provider outages, and rate limits can leave some fields unavailable.
A public check runs as a background job, and the job record and its finished report are stored for 24 hours so the results page can show them; a scheduled sweep then deletes them. They hold the domain and its findings, never your address or an account. Domains also appear in page URLs, so they may be present in your browser history and in hosting request logs. Reports you run from a panel account are kept in that account until you delete them.
A single check is a point-in-time scan and enrolls you in nothing. Daily re-checks with email alerts are part of the Pro plan, which you switch on per domain in your panel.
No. The engine generates thousands of candidates from about twenty pattern families, 180 endings and common hosting platforms, and searches certificate logs, but it resolves at most the first 2,970 candidates and cannot enumerate every script, ending or subdomain. No findings should not be interpreted as proof that a brand is safe.
Use the contact page and include the domain and the result you believe is wrong. Because the checker only reports what public registries and DNS returned at the time, most corrections come from re-running the check after records update.
Typosquatting.ai is an independent product. The checker needs no account, has no adverts or affiliate links, and is funded by paid plans rather than by data resale. The about page has the details.