There's a checksum, so your desired typosquatting address may not even be a valid address to begin with (the chance that it is valid is only 1 in 2^32). Even if it is a valid address it would be very very difficult to generate it. The difficulty of doing so would be at least as difficult as preimage attacks on both SHA-256 and RIPEMD-160.