Explained: typosquatting [updated]

JMH

Emeritus, Contributor
Joined
Apr 2, 2012
Posts
7,197
Typosquatting is a term you may have seen when reading about Internet scams. In essence it relies on users making typing errors (typos) when entering a site or domain name. Sometimes it is also referred to as URL hijacking or domain mimicry, but IMHO the word typosquatting describes the matter more adequate.

Roads to success

As you will understand the success of a typosquat scammer depends on the number of victims that are likely to misspell the intended domain and land on the scammers’ pages. To maximize the success rate takes some insight into the workings of human mind-fingers coordination.

Another thing to keep in mind is that there are many different keyboard layouts, so replacing one letter with an adjourning character on the QWERTY keyboard does not work for everyone.

One road to success depends on the occurrence of double letters in a domain name. A regular mistake is to type the consecutive letter double instead of the intended one. For example the rather famous goggle[dot]com.

Another often used trick is to try and register domains with the same name but with a different top-level domain (TLD)

whitehouse.png


This is actually an adult site
Explained: Typosquatting [updated] | Malwarebytes Labs
 

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top