What is the difference between omission and deletion typosquatting?

None. Both describe one character removed from a real name. Some tools call it deletion, most call it omission.

Why is the missing-and-added family so much larger?

Because after one letter is dropped, another can be inserted at any position with any of 36 characters. Seven omissions become 154 two-edit names.

Does the checker catch an omission under a different ending?

Yes, as two separate families: the omission under your ending, and the different-ending family for your exact name under other endings. A name that combines both is generated by the keyword-and-ending and different-ending rules where they apply.

Is a parked omission worth a takedown?

Usually not, and a registrar will rarely act on parking alone. Keep it on the watchlist: the alert to care about is the day it gains a mail record or a certificate.

PATTERNS

Omission Typosquatting: One Letter Missing

The eye completes words. A name missing one letter reads as the real one to most people, most of the time. Illustrative lookalikes in this guide use the reserved .test ending, so that no real registration is named.

by Typosquatting.ai Research23 September 20264 min read

Omission typosquatting registers a domain from which one character of a real name has been removed, so that exmple.test stands in for example.test.

This guide covers why a dropped letter is the single most common typing error, the candidates the pattern produces, the combined omission-and-addition family that hides a second edit, how the checker ranks these names, and what to do with a registered one.

Family in a report: Missing character
Sample: exmple.test
Candidates for a six-letter domain: 7 of 3,001

What an omission is

Remove one character from the registrable label of a domain and keep the ending. A six-letter label gives six candidates, one per position, fewer where the label repeats a letter, since dropping either of a doubled pair produces the same name. The checker resolves each candidate over DNS and searches the certificate logs for it, and only the ones that exist appear in the report.

A second family, missing and added character, drops one letter and inserts another elsewhere, so that exmples.test is one omission and one addition away from example.test. That family is much larger, 154 candidates for a six-letter label, because the added letter can go anywhere.

Why one missing letter reads correctly

Damerau found in 1964 that more than 80 percent of misspellings were a single edit, and a dropped letter is the edit a fast typist makes most. The reader is no help: people recognise words by shape and first and last letters, so a word missing an interior letter is read as the word. In an email, in a chat message, on a phone screen, exmple passes.

Short labels are the exception. Drop a letter from a four-letter name and the shape changes enough to be seen; drop one from a nine-letter name and it rarely is.

How many candidates it produces

Seven omission candidates for a six-letter .com, and 154 in the missing-and-added family. The whole check generates 3,001 names, so omissions are a fraction of the work but a large share of the names people actually type by mistake.

Family	Example	Candidates for a six-letter label
Missing character	exmple.test	7
Missing and added character	exmples.test	154

What a registered omission usually is

Parked pages that monetise mistyped traffic are the classic case; the 2006 McAfee promotion around goggle.com, a typosquat of Google, showed a mistyped name delivering malware through drive-by downloads at the time. Defensive registrations by the brand are the second case, and the checker tags a name that shares your registrar and nameservers as Possibly yours so it is not counted as risk. Phishing is the third and the one that carries a fresh registration, an address, a mail record and often a new certificate.

A registered omission is a name to review, not a finding of intent. The row shows the record and the rule; the decision is yours and the ledger keeps it.

How the checker finds and ranks it

A finding's review priority is a published rule, not a score. A name with an address or a mail record is active; active names registered under 90 days ago are Elevated, and so are active names under a year old that carry an impersonation keyword. Anything else that is active or has a registry record is Review, a name with no registry record and no DNS answer is Low signal, and a lookup the registry refused stays Unknown rather than being counted as a negative.

Omissions sit one edit from the real name, the nearest distance band, so they lead a report sorted by closeness. The missing-and-added family sits two edits away and one band further out.

What to do with one

Tag what is yours. Watch what is dormant. For an active, recent registration with mail routing, keep the report and file with the registrar or host using the evidence in the row; the response guide has the order and the wording. Never open the name to see what it serves; the passive web record in the report already says whether a scanner has seen it.

Common questions

What is the difference between omission and deletion typosquatting?: None. Both describe one character removed from a real name. Some tools call it deletion, most call it omission.
Why is the missing-and-added family so much larger?: Because after one letter is dropped, another can be inserted at any position with any of 36 characters. Seven omissions become 154 two-edit names.
Does the checker catch an omission under a different ending?: Yes, as two separate families: the omission under your ending, and the different-ending family for your exact name under other endings. A name that combines both is generated by the keyword-and-ending and different-ending rules where they apply.
Is a parked omission worth a takedown?: Usually not, and a registrar will rarely act on parking alone. Keep it on the watchlist: the alert to care about is the day it gains a mail record or a certificate.