Why You Should Register Common Typos of Your Domain Name

Your main domain name may be registered, connected to your website, and protected with a strong password. However, customers can still lan missing one letter, switching two characters, adding a hyphen, or choosing the wrong extension.

This is why businesses should consider registering common typos of their domain name.

A typo domain is a domain that looks or sounds similar to your main address. For example, a business using safaribasket.com might also protect variations such as safaribaskets.com, safaribaket.com, and safari-basket.com.

You do not build separate websites on these domains. You register the most important variations and redirect visitors to your official website.

This small step can help you recover lost visitors, protect customers from impersonation, reduce phishing risks, and keep competitors or domain squatters away from names closely connected to your brand.

The risk is not theoretical. The World Intellectual Property Organization handled more than 6,200 domain-name disputes in 2025, its highest annual caseload. It has resolved more than 80,000 cases over the past 25 years.

What is a typo domain?

A typo domain is a misspelled or slightly altered version of another domain name.

Suppose your official domain is:

brightbasket.com

Someone could accidentally enter:

• brigtbasket.com

• brightbaskett.com

• birghtbasket.com

• bright-basket.com

• brightbaskets.com

• brightbasket.co.ke

Some of these are simple typing mistakes. Others are common brand variations that customers may assume belong to the same company.

When another person intentionally registers a misspelled domain to benefit from this confusion, the practice is commonly called typosquatting.

Microsoft defines typosquatting as registering a common misspelling of another organisation’s domain name. A user who makes the same mistake may then arrive at the typosquatter’s site without immediately noticing the difference.

How typosquatting works

Typosquatting depends on users overlooking a small difference in a web address.

An attacker may copy your colours, logo, wording, product images, or login screen. They can then use the lookalike domain to appear connected to your business.

The fake domain may be used to:

• Display advertisements

• Redirect visitors to another company

• Sell competing products

• Collect email addresses

• Steal passwords

• Request fraudulent payments

• Distribute harmful downloads

• Damage your business reputation

• Offer the domain back to you at a high price

Some typosquatted domains do not have a visible website at all. They may only be configured for email.

For example, a fraudster could register a domain that differs from yours by one letter and send an invoice that appears to come from your accounts department.

This can be particularly dangerous because a lookalike domain can publish valid email authentication records.

The message may pass SPF, DKIM, and DMARC checks even though the domain belongs to an impersonator.

Email authentication confirms that the sending domain authorised the message; it does not prove that the domain is your real brand.

1) Registering typo domains protects your customers

Customers do not inspect every character in a URL before opening a website.

They may click a link from an email, type the address from memory, or follow a domain printed on a poster.

If the domain looks familiar, many people assume they have reached the correct business.

A fake website can copy your branding and ask visitors to:

• Enter an email address and password

• Pay an invoice

• Submit personal information

• Download a document

• Contact a fake support number

• Share bank or card details

The customer may blame your company after discovering the fraud, even when you did not create or control the fake website.

Registering the most predictable variations reduces the number of useful lookalike domains available to scammers.

It does not stop every possible impersonation attempt, but it closes some of the easiest opportunities.

2) You recover visitors who make typing mistakes

People occasionally type web addresses manually.

This is common when a domain appears on:

• A billboard

• A vehicle

• A business card

• A radio advertisement

• Product packaging

• A television advert

• A printed invoice

• An event banner

• A social media graphic

• A word-of-mouth recommendation

A user who misses one letter may reach an error page or another website.

When you own that misspelling, you can redirect the visitor to your official domain. The user reaches the intended destination without needing to identify and correct the mistake.

This is more valuable for businesses with:

• Short domains

• Frequently typed domains

• Names with unusual spellings

• Two-word business names

• Repeated letters

• Easily confused letters

• Names commonly pronounced differently from their spelling

For example, customers may hear a domain during a radio advertisement without knowing whether the name is singular, plural, hyphenated, or written as one word.

Registering the most likely versions gives them more than one safe route to your website.

3) You protect your brand reputation

Your domain name is part of your business identity.

Customers may associate anything appearing under a similar domain with your company.

A poorly designed copy, misleading advertisement, fake shop, or scam page can create confusion.

Someone may assume:

• Your website has been hacked

• Your company is running the advertisement

• Your business collected their information

• Your support team sent the message

• Your company failed to deliver an order

• Your payment system is unsafe

Even after the fake site is removed, affected customers may remain cautious about your real business.

Registering important typo domains gives you more control over how your brand appears online.

4) You can prevent email impersonation

A domain is not only used for a website.

It can also be used to create email addresses.

Imagine your company uses:

[email protected]

A scammer could register a close variation and send messages from:

[email protected]

The extra letter may be difficult to notice, especially on a phone screen.

The fake sender could request:

• A change of payment details

• An urgent bank transfer

• Payment for a false invoice

• A password reset

• Copies of business documents

• Employee payroll information

• Customer account details

Because the scammer owns the lookalike domain, they can configure it to send technically authenticated messages.

Defensive domain registration prevents another person from owning the specific variations you have registered.

You should still protect your main domain with SPF, DKIM, DMARC, two-factor authentication, secure email accounts, and staff training. Typo registration is one layer of protection, not a complete email security system.

5) You stop others from holding the domain for resale

Some people register names connected to existing businesses and wait for the business owner to make an offer.

The asking price may be much higher than the normal registration cost.

A domain that was inexpensive while available can become costly once another person controls it.

The owner may:

• List it for sale

• Display advertisements

• Redirect it to a competitor

• Demand payment from your company

• Leave it unused while waiting for an offer

Registering important variations early is usually simpler than trying to recover them later.

6) You reduce the need for a domain dispute

Trademark owners may be able to challenge abusive registrations through the Uniform Domain Name Dispute Resolution Policy, commonly called the UDRP.

ICANN states that trademark-based domain disputes may need to be resolved through agreement, court action, or an approved dispute-resolution process before a registrar can cancel, suspend, or transfer a domain.

The complainant generally needs to show that:

• The domain is identical or confusingly similar to a trademark

• The current registrant has no legitimate interest in it

• The domain was registered and used in bad faith

The exact process also depends on the extension and dispute policy involved.

A defensive registration avoids this process for the domains you protect before someone else registers them.

This article does not provide legal advice. Speak to a qualified intellectual-property professional when dealing with an active trademark or domain dispute.

7) You protect advertising campaigns

A typo is more expensive when you are actively paying to promote your domain.

Imagine running a campaign across:

• Google Ads

• Social media

• Radio

• Television

• Newspapers

• Posters

• Influencer content

• Outdoor advertising

Customers see or hear the business name and later type what they remember.

A lookalike domain could receive traffic generated by the money you spent promoting your brand.

This is especially important when the domain is:

• Spoken aloud in advertisements

• Printed in a small font

• Difficult to spell

• Easy to pluralise

• Made from two words

• Commonly written with a hyphen

• Different from the business’s usual spelling

Before launching a major campaign, check the obvious spelling variations and extensions.

8) You can protect product and campaign names

Your main company domain may not be the only name worth protecting.

You may also register variations of:

• A major product name

• A customer portal

• A mobile application

• A conference

• A seasonal campaign

• A loyalty programme

• A payment platform

• A popular service

• A new business division

This is most useful when the name will receive significant publicity or handle sensitive customer activity.

For example, a dedicated login or payment service faces greater impersonation risk than an internal project name that customers never see.

Common types of domain typos

You do not need to register every possible combination of letters.

Start with mistakes that a real customer is likely to make.

1) Missing letters

A user may skip one character while typing.

Official domain:

greenmarket.com

Possible typo:

grenmarket.com

Pay close attention to repeated letters and letters located near the middle of the name.

2) Repeated letters

A customer may press the same key twice.

Official domain:

fastcart.com

Possible typo:

fasttcart.com

This is common when the final letter of one word is also close to the first letter of the next.

3) Reversed letters

Two neighbouring letters may be entered in the wrong order.

Official domain:

brightshop.com

Possible typo:

birghtshop.com

This is called a transposition error.

4) Adjacent keyboard letters

A user may press a key next to the intended letter.

Official domain:

smartdesk.com

Possible typo:

smartdssk.com

Consider the keyboards most of your customers use, including mobile keyboards.

5) Singular and plural versions

Customers may not remember whether your domain contains an “s”.

Examples include:

• freshbasket.com

• freshbaskets.com

This variation is particularly important when both forms sound natural.

6) Hyphenated and non-hyphenated versions

A two-word name may be written with or without a hyphen.

Examples include:

• cityhost.com

• city-host.com

Your main domain should usually be the simpler version, but the alternative can redirect to it.

7) Joined and separated words

Domain names cannot contain spaces, so customers may be unsure how a multi-word brand is arranged.

For example:

• buildwithus.com

• build-with-us.com

A short, memorable primary domain remains important. Defensive variants should support it rather than replace it.

8) Alternative spellings

Some words have more than one accepted spelling.

Examples include:

• center and centre

• color and colour

• organize and organise

A business serving customers in several countries may need to consider regional spelling differences.

9) Phonetic spellings

A customer may type a name according to how it sounds.

This is common with:

• Invented brand names

• Names from local languages

• Names with silent letters

• Names containing numbers

• Names with unusual letter combinations

Ask customers, employees, and sales representatives how they would spell the brand after hearing it once.

10) Numbers written as words

Customers may not know whether your domain uses a numeral or a written word.

Examples include:

• 24market.com

• twentyfourmarket.com

You may also need to consider combinations such as market24.com.

11) Common abbreviations

People may shorten your business name.

For example, a business called Mara Business Solutions may be remembered as:

• marabusinesssolutions.com

• marabusiness.com

• mbsolutions.com

You do not need every abbreviation. Protect the ones already used by customers, employees, partners, or marketing campaigns.

12) Different domain extensions

A customer may remember the name but choose the wrong ending.

For example:

• yourbrand.com

• yourbrand.co.ke

• yourbrand.ke

• yourbrand.net

• yourbrand.org

These are not spelling errors, but they can create the same confusion.

A Kenyan business may use .co.ke as its main address while also protecting the matching .com where available. An international business may use .com while securing relevant country extensions in its major markets.

Which typo domains should you register first?

Trying to register every imaginable variation can become expensive and difficult to manage.

Use a risk-based approach.

Priority	Variations to consider
Highest	Missing-letter typos, reversed letters, singular and plural forms, hyphenated versions and your main country extension
High	Common phonetic spellings, repeated letters, alternate regional spellings and the matching .com
Medium	Product names, campaign names, abbreviations and likely keyboard mistakes
Lower	Unusual spelling errors, unrelated extensions and variations customers are unlikely to enter

Your priorities should reflect how customers interact with your brand.

A bank, ecommerce store, payment platform, school portal, hosting company, or healthcare system may need broader protection because users log in or submit sensitive information.

A small informational website with little direct traffic may only need a few obvious variations.

A simple way to find likely domain typos

Use the following process.

1) Write down your official domain

Separate the name into words and syllables.

Look for:

• Double letters

• Silent letters

• Repeated sounds

• Similar vowels

• Long words

• Numbers

• Hyphens

• Singular words

• Regional spellings

2) Ask people to type it after hearing it

Say the domain aloud without showing the spelling.

Ask several people to write what they heard.

Their mistakes may reveal more realistic variations than an automated generator.

3) Review customer messages

Look through emails, support tickets, search queries, social media mentions, invoices, and form submissions.

Customers may already be misspelling your business name in predictable ways.

4) Check search data

Google Search Console and other search tools may show misspelled brand searches.

A repeated misspelling is a strong candidate for defensive registration.

5) Consider the keyboard

Look at letters next to each other on common computer and mobile keyboards.

A short brand may have several obvious one-key mistakes.

6) Check domain availability

Search the most important variations using a domain availability checker.

Register the high-risk options that are available and relevant to your business.

Truehost provides domain search and registration across extensions such as .com, .co, .org, .xyz, .top, .shop, .us, and other domain endings. How many typo domains should you register?

There is no single correct number.

A small business may protect three to ten variations. A large financial, ecommerce, software, or consumer brand may need a much larger defensive portfolio.

Consider:

• How valuable the brand is

• How much direct traffic the website receives

• How often the name appears offline

• How difficult the name is to spell

• Whether customers log in

• Whether the site accepts payments

• How many countries the company serves

• How much harm impersonation could cause

• The annual renewal cost

• The ability to monitor and manage the domains

Registering hundreds of random variations is not always useful.

Protect the mistakes most likely to cause traffic loss, fraud, or customer confusion.

What should you do after registering a typo domain?

Buying the domain is only the first step.

Redirect it to your official website

Set up a permanent redirect from the typo domain to your main domain.

For example:

brightbaskets.com → brightbasket.com

Google treats permanent server-side redirects such as 301 and 308 redirects as strong signals that the destination should be treated as the canonical URL. most cases, redirect the typo domain instead of publishing a duplicate copy of your website.

Redirect visitors to the relevant page

When possible, send users to the corresponding page rather than always sending them to the homepage.

For example:

wrongdomain.com/pricing → correctdomain.com/pricing

This preserves the user’s intended destination.

Test the redirect

Test the domain using:

• http://

• https://

• The www version

• The non-www version

• Mobile and desktop browsers

Confirm that each version reaches the correct official website.

Keep the registration active

A typo domain only protects you while you continue renewing it.

Turn on renewal reminders or automatic renewal where appropriate.

Use an email address that your business actively monitors so expiry notices are not missed.

Secure the registrar account

Protect your domain-management account with:

• A unique password

• Two-factor authentication

• Limited user access

• An up-to-date recovery email

• Domain transfer lock

• Renewal monitoring

ICANN notes that domain names can be locked to help protect them against unauthorised changes or transfers. The status may appear as Registrar Lock or Client Transfer Prohibited. Decide how email should work

Website redirection and email are separate services.

Do not assume that redirecting a typo domain will also redirect messages sent to an address on that domain.

Ask your domain or email provider to configure unused defensive domains so they cannot be abused for outgoing email.

Avoid creating a catch-all mailbox unless your business has a clear operational and privacy process for handling messages that people accidentally send to the wrong address.

Do typo domains improve SEO?

Registering typo domains does not automatically improve your rankings.

A defensive domain may recover direct visitors and reduce brand confusion, but simply owning several domains does not give your website additional authority.

For the cleanest setup:

• Keep one official domain

• Redirect typo domains to it

• Use permanent redirects

• Avoid publishing duplicate websites

• Keep internal links pointed at the official domain

• Include the official domain in your sitemap

• Use consistent canonical URLs

Google recommends redirects and canonical signals to identify the preferred version when similar or duplicate URLs exist. not create thin, nearly identical websites on every typo domain in an attempt to occupy more search results. This creates unnecessary maintenance and may confuse customers and search engines.

Can you register typos of a competitor’s domain?

You should not register misspellings of another company’s name to capture its customers, sell competing products, display advertisements, or demand payment from the brand owner.

Such conduct may be considered cybersquatting, trademark infringement, passing off, or bad-faith registration, depending on the circumstances and local law.

ICANN describes cybersquatting as the bad-faith registration of another party’s trademark in a domain name.

Trademark owners may be able to begin a UDRP proceeding for qualifying disputes. Expensive domain registration should focus on names connected to your own business, products, trademarks, and campaigns.

What if someone already owns the typo domain?

Start by checking how the domain is being used.

It may belong to:

• An unrelated business

• A legitimate person with a similar name

• A domain investor

• A parked advertising page

• A competitor

• An impersonator

• A phishing operation

Do not immediately accuse the registrant of infringement.

A similar domain is not automatically unlawful. The owner may have a legitimate interest in the name.

Depending on the situation, you may:

1. Monitor the domain for changes.

2. Contact the owner through a professional intermediary.

3. Make a reasonable purchase offer.

4. Report phishing or fraud to the hosting provider, registrar, relevant platform, or authorities.

5. Speak to a trademark professional.

6. Consider an applicable domain dispute process.

Keep copies of suspicious emails, screenshots, dates, URLs, payment requests, and customer reports. This evidence may be useful when reporting abuse.

Who benefits most from defensive domain registration?

Registering common typos is particularly useful for:

• Ecommerce stores

• Banks and financial services

• Insurance companies

• Schools and universities

• Healthcare providers

• Hosting companies

• SaaS platforms

• Government service portals

• Membership websites

• Online marketplaces

• Businesses running national advertising

• Companies accepting online payments

• Businesses with customer login portals

• Brands operating in several countries

Smaller businesses can also benefit when their name is frequently misspelled or advertised offline.

Defensive domain registration checklist

Use this checklist when reviewing your domain portfolio.

• Register your primary domain

• Protect the matching local extension

• Check the matching .com

• Register common missing-letter versions

• Check reversed-letter mistakes

• Protect singular and plural versions

• Consider hyphenated and non-hyphenated forms

• Check common phonetic spellings

• Consider regional spellings

• Protect major product or campaign names

• Redirect all defensive domains

• Test HTTP and HTTPS access

• Protect your registrar account

• Turn on renewal reminders

• Enable domain locking

• Monitor new lookalike registrations

• Protect your email with SPF, DKIM and DMARC

• Train staff to verify payment requests

• Keep evidence of impersonation attempts

Register your domain variations with Truehost

Registering your main domain establishes your online address. Registering a few carefully selected variations helps protect that address.

Truehost lets you search and register domain names across a wide range of extensions. You can secure your main domain, relevant country extensions, product names, and the most likely spelling variations from one place.

After registration, point the alternative domains to your main website and keep them active as part of your brand-protection plan.

The goal is not to own every possible spelling.

Focus on the variations customers are most likely to type and the domains an impersonator would find most useful.

Frequently asked questions

What is typosquatting?

Typosquatting is the registration of a misspelled or slightly altered version of another organisation’s domain.

The registrant may use it to capture mistyped traffic, display advertisements, impersonate the business, send fraudulent emails, or sell the domain to the brand owner.

Is it worth buying misspelled domain names?

It can be worth buying the most common misspellings when your brand receives direct traffic, handles customer logins or payments, runs offline advertising, or has a name that is easy to mistype.

You do not need every possible variation.

Should I register the singular and plural versions?

Register both when customers could reasonably use either form.

For example, a person may not remember whether your domain is besthost.com or besthosts.com.

Should I buy both the hyphenated and non-hyphenated domains?

Consider registering both when your business name contains two or more words.

Use the shorter and easier version as your official domain, then redirect the alternative to it.

Should I register both .com and .co.ke?

A Kenyan business may benefit from protecting both when they are available.

You can use one as the main domain and redirect the other. The best primary extension depends on your target market, brand strategy, and existing customer recognition.

Can I create a second website on the typo domain?

You usually do not need a separate website.

A permanent redirect to your main domain is easier to manage and reduces duplicate content and customer confusion.

Will a typo domain improve my Google ranking?

Not by itself.

Its main benefits are brand protection, traffic recovery, customer safety, and reduced impersonation risk.

Can someone send email from a typo of my domain?

Yes, when they own that typo domain and configure email services on it.

The email may appear convincing because the sender’s address differs from your real address by only one character.

Does registering typos stop all phishing?

No.

Attackers can create many other variations, use subdomains, imitate your logo, compromise real accounts, or use unrelated domains.

Defensive registration should be combined with email security, monitoring, staff training, two-factor authentication, and clear customer communication.

How often should I review domain variations?

Review them before major campaigns, product launches, market expansions, rebranding projects, or new customer portals.

An annual review can also identify new misspellings, extensions, and impersonation risks.

Final thoughts

Customers do not always type domain names perfectly.

A missing letter or misplaced character can send a visitor to an error page, an unrelated business, or a convincing fake website.

Registering common typos of your domain name gives you control over the variations that matter most. You can redirect genuine visitors, reduce impersonation opportunities, protect advertising campaigns, and make it harder for scammers to misuse your brand.

Start with the obvious mistakes.

Protect your local and international extensions, singular and plural forms, missing letters, reversed characters, and common spelling variations. Redirect each one to your official website and manage them with the same care as your primary domain.