Transposition Typosquatting: Two Letters Swapped
Transposition typosquatting registers a domain in which two neighbouring characters of a real name have changed places, so that exmaple.test stands in for example.test.
5 min readEvery lookalike is derived from a real name by one rule. These guides take the families one at a time: how the mistake or the trick works, how many candidates it produces for a six-letter domain, what a registered one usually turns out to be, and how the checker ranks it.
Transposition typosquatting registers a domain in which two neighbouring characters of a real name have changed places, so that exmaple.test stands in for example.test.
5 min readOmission typosquatting registers a domain from which one character of a real name has been removed, so that exmple.test stands in for example.test.
4 min readInsertion typosquatting registers a domain in which one character has been added to a real name, inside it, at the end, or as a plural, so that exsample.test, examplea.test and examples.test all stand in for example.test.
3 min readRepetition typosquatting registers a domain in which one character of a real name appears twice in succession, so that exaample.test stands in for example.test.
3 min readKeyboard typosquatting registers a domain in which one character of a real name has been replaced by a key adjacent to it on a keyboard, so that ezample.test stands in for example.test.
4 min readA homoglyph domain replaces one or more characters of a real name with characters that look the same or nearly the same, within the Latin script, such as rn for m and 1 for l, or across scripts, such as a Cyrillic a for a Latin a.
5 min readCombosquatting registers a domain that contains a real brand name unchanged, joined to one or more other words, so that example-login.test, secure-example.test and my-example.test all trade on example.test.
4 min readTLD squatting registers the registrable label of a real domain, unchanged, under a different top-level domain, so that example.net or example.app stands in for example.com.
4 min readA subdomain-split lookalike inserts a dot into a real name so that part of it becomes a subdomain of a different registrable domain, ex.ample.test for example.test; a hyphenated lookalike inserts a hyphen instead, ex-ample.test.
4 min readA hosting-platform lookalike is a real brand name claimed as a subdomain of a public hosting platform, so that example.pages.dev, example.netlify.app or example.github.io stands in for example.com without any domain being registered.
4 min readBitsquatting registers a domain name one bit different from a popular one, so that a hardware error that flips a bit in a stored name, in a computer, a phone or a router, delivers a request to the squatter without any person having typed anything wrong.
4 min readMore sections: Typosquatting, Domain protection, Domain intelligence, Brand protection, Email security.