Who owns ex.ample.test?

Whoever registered ample.test. The part before the dot is a subdomain that owner can create without any registration.

Is a hyphenated name a different family from a subdomain split?

Yes. A hyphen keeps one registrable label, one edit away. A dot moves the registration boundary to a different name.

Why does the report show a registrar for ample.test rather than ex.ample.test?

Because only registrable domains have registration records. The row names both: the record for the registered part, the DNS for the full name.

How long can a domain label be?

Up to 63 characters, with the whole name up to 255, under RFC 1035. Splits and hyphens rarely approach either limit.

PATTERNS

Subdomain and Hyphen Lookalikes: ex.ample and ex-ample

A dot inside a name changes who owns it. The reader does not see that; the DNS does. Illustrative lookalikes in this guide use the reserved .test ending, so that no real registration is named.

by Typosquatting.ai Research23 September 20264 min read

A subdomain-split lookalike inserts a dot into a real name so that part of it becomes a subdomain of a different registrable domain, ex.ample.test for example.test; a hyphenated lookalike inserts a hyphen instead, ex-ample.test.

This guide covers what the registrable domain is once a dot has been inserted, why the eye reads across dots and hyphens, the small candidate counts, how the checker names these findings, and what to do with one.

Family in a report: Subdomain split
Sample: ex.ample.test
Candidates for a six-letter domain: 6 of 3,001, plus 6 hyphenated

What the split does

Insert a dot between two characters of the label and the part after the dot, with the ending, becomes the registrable domain: in ex.ample.test the registered name is ample.test, and ex is a subdomain its owner can create at will. A hyphen leaves the whole thing as one registrable label, ex-ample.test, one edit from the real name. Six candidates each for a six-letter label, since there are five gaps plus the hyphen variants that differ.

RFC 1035 limits each label to 63 octets and the whole name to 255, which is why the split never runs out of room and why long brand names can be split in more places.

Family	Example	Registrable domain	Candidates for a six-letter label
Subdomain split	ex.ample.test	ample.test	6
Hyphenated form	ex-ample.test	ex-ample.test	6

Why the eye reads across it

People read a brand as a shape and a sound. A dot or a hyphen inside it is punctuation, and punctuation is skipped. In an email address, in a link, in a message, ex.ample reads as example to anyone not looking for the dot. The subdomain form has a second advantage for its owner: only the registrable part is registered, so ample.test carries an ordinary registration record that says nothing about ex.

What a registered split usually is

The split is generated for a short list of positions and is rarely registered by accident. When ample.test exists, it is usually an unrelated word registered by someone else, and the checker reports it as such: the registrable domain, its record and its DNS, with the split spelled out in the pattern column. Whether a subdomain ex exists under it is a question DNS can answer, and the checker resolves the full split name to find out.

How the checker finds and ranks it

A finding's review priority is a published rule, not a score. A name with an address or a mail record is active; active names registered under 90 days ago are Elevated, and so are active names under a year old that carry an impersonation keyword. Anything else that is active or has a registry record is Review, a name with no registry record and no DNS answer is Low signal, and a lookup the registry refused stays Unknown rather than being counted as a negative.

The registrable domain is what carries the registration record, so the row shows ample.test's registrar and age; the resolved name is the full split, so the address and mail columns describe ex.ample.test.

What to do with one

Where the registrable domain is an unrelated word, tag the row Ignored. Where the full split name resolves, carries a certificate and is recent, keep the report; a registrar will act on the registrable domain, and the response guide covers the host route when the registrant is a platform. Never open it.

Common questions

Who owns ex.ample.test?: Whoever registered ample.test. The part before the dot is a subdomain that owner can create without any registration.
Is a hyphenated name a different family from a subdomain split?: Yes. A hyphen keeps one registrable label, one edit away. A dot moves the registration boundary to a different name.
Why does the report show a registrar for ample.test rather than ex.ample.test?: Because only registrable domains have registration records. The row names both: the record for the registered part, the DNS for the full name.
How long can a domain label be?: Up to 63 characters, with the whole name up to 255, under RFC 1035. Splits and hyphens rarely approach either limit.