Typo domains: opportunity or risk?
Author: Domeny.ForSale editorial team Published Updated
At a glance: Registering common misspellings of your own domain and redirecting them can protect a brand. Acquiring misspellings of other brands to capture their visitors carries legal, commercial and reputational risks. The number of possible errors is not a reason to register every variation.
What is a typo domain?
A typo domain resembles the intended address but includes an error someone might make when typing: a missing or repeated letter, transposed characters or the wrong extension.
For example, a shop at zielonakawa.pl might be confused with zielonkawa.pl or zielonakawwa.pl. Visually similar characters create another class of lookalikes, sometimes used to impersonate a brand.
Registering similar names to exploit mistakes is often called typosquatting. Whether a particular registration is legitimate protection or abuse depends on the use, rights to the name and circumstances.
When can a misspelling protect a brand?
Defensive registration is most useful when a mistake is natural and likely, and landing on an unrelated page could have serious consequences. This includes shops, financial services, sign-in portals and brands advertising their address in print or on radio.
Permanently redirect the additional domain to the main address. Maintaining a duplicate website complicates content, analytics and security. Enable renewal and keep the defensive domain under appropriately secured account control.
If customers routinely omit a doubled letter, acquiring that one likely misspelling can solve a real problem. Dozens of arbitrary combinations may be disproportionate to the benefit.
Where does the risk begin?
Misspellings of other companies’ brands are particularly risky. Advertising, competing offers, login forms or attempts to sell the domain to the brand holder can be relevant to claims of bad faith or infringement.
The legal outcome depends on jurisdiction, similarity, page content and the scope of protected rights. Similarity does not automatically decide every case. Check relevant trademarks, registry rules and dispute procedures; substantial uncertainty warrants individual legal advice.
Reputation also matters. Redirecting people looking for a competitor can appear misleading even without malicious code or a login form. Resale may be difficult when the main plausible buyer is the business being imitated.
Choosing defensive registrations
Use evidence instead of generating every possible typo:
- Record mistakes seen in customer messages, support enquiries and usability tests.
- Check variants involving doubled letters, Polish accents, hyphens and common extensions.
- Assess the consequence: losing one visit differs from exposing passwords or payment information.
- Prioritise a few obvious variations.
- Configure redirects, automatic renewal, strong authentication and independent reminders.
For an accented brand, both the Polish-character and unaccented forms may be useful. Choose which one is primary so customers are not presented with several competing official addresses.
Defensive domains do not replace monitoring
No business can register every lookalike, particularly across multiple markets and extensions. Monitor similar registrations, communicate the official address clearly and use email protections against impersonation.
Start with three to five plausible mistakes and check availability and conflicting rights. If the purpose is to help your own customers who mistype, redirect the names to one consistently promoted main address.
Read also: Monitoring domains similar to your brand .
Read also
