You've compiled a neat list of possible indicators for a classifier. Some feedback:
First: Who would run this classifier? Are you talking about a browser or a browser plugin that will check every URL, or are you designing a redirector service of some kind? Are you building a search engine? Obviously, your classifier only works in cases like these; it doesn't help if you're just the owner of the real "facebook.com" and want to protect your users from entering "faecbook.com", because you'll never get to see the wrong "faecbook.com".
Playing devil's advocate to your suggestions:
Check the domain for typosquatting: This only works if you have an inkling what the "actual" domain name should be. You could probably automate this using result counts of various search engines (or, if you were a search engine yourself, look at your index to identify close matches) or try to access domain registry databases. Or, as a browser plugin developer, you could create a central database of domains your users visit, and then determine which domains are typosquatters using some simple statistics. However, if you did this, you'd have to deal with serious privacy issues.
Check the length of the redirection url: This is dangerous: There are various protocols which require redirection and which can pass a lot of information through the URL (oauth, for example). You'd have to exclude these protocols to avoid false positives. Also, some frameworks send things like session identifiers as parameters in the URL as a fallback when cookies are disabled. That's hard to distinguish from your typosquatter.
Count the number of redirects: I don't understand this. If you're refering to the number of redirects the browser does when it hits a typosquatter url, I don't think this will work very well as an indicator. Again, there are valid reasons for redirects, and a higher number doesn't necessarily imply malicious intent. Also, there's no technical reason for typosquatters to do more than one redirect (in fact, they don't even need to do a single one; redirects are just the simplest (and cheapest!) way to forward the user to a third-party site, but they could take the traffic and cpu hit and act as a proxy instead of doing http redirection, which would be invisible to you - it would just make it more expensive for the bad guys); so if you built a hugely successful classifier based on the number of redirects, the typosquatters could simply adapt.
Blacklist: It will never be even close to complete or up to date. How would you compile it? If you were a browser plugin developer, one way would be to record which domains your users visit, as I already said. If you were a search engine, you might be able to do something with your index, although most typosquatter domains probably wouldn't be indexed at all, so there'd be no way to build an even remotely useful blacklist from it.
An additional avenue you might think about is to try to classify the target page based on its content. You say that the target pages try to get you to provide personal information, offer fake tech support etc. It might be possible to build a classifier on that, kind of like the classifiers to determine whether we're dealing with ham or spam in our mailboxes. You could also run a limited spider on the target site to see how big it was; if it only offered a handful of pages, that would be an additional indicator. But again, if you were successful, this would be easily overcome by your opponents automatically building a large number of fake additional pages.