Skip to main content
OverflowAI is here! AI power for your Stack Overflow for Teams knowledge community. Learn more

Questions tagged [typosquatting]

Practice of registering domain names that may be mistaken for widely used sites (e.g. `` instead of ``) when the user tries to type in the URL. May be used for phishing credentials and/or spreading malware.

Filter by
Sorted by
Tagged with
0 votes
1 answer

How to prevent credential stealing of customers via phishing and domain squatting

Threat actors are creating lookalike domains (ex. to, and using those to phish users for credentials (not employees). They’re getting the MFA tokens, too. What could be done ...
Kumar's user avatar
  • 1
2 votes
4 answers

Why don't bigger companies buy similar domains to their main domain to prevent typosquatting?

One big threat out there is typosquat domains. For example instead of: some malicious actor will register the domain and set up his fake steam login. Why do ...
birdd's user avatar
  • 41
0 votes
1 answer

Protecting an external authentication server against CSRF

I have a web application which uses an external authentication server for obtaining a session. When a client tries to login, the browser is making requests towards the external authentication server ...
ficabj5's user avatar
  • 23
3 votes
2 answers

How much damage can a malicious package do with just "npm install <package>"?

I had a typo and npm installed something that is similar in name to something very popular -- I was concerned about typosquatting. It's quite plausibly legitimate and just a coincidence. I looked at ...
user237586's user avatar
2 votes
0 answers

Has someone quantified how much more effective typodomains are than random websites in phishing attacks?

Has someone done an actual study on how effective typo domains are versus random websites in phishing links? I am trying to justify the expense of going after typosquatters and the possibility of the ...
Chas. Owens's user avatar
3 votes
4 answers

Should I buy nonsense domains just to make sure my clients don't visit a misspelled domain?

I have my new website to be published (it's called I will have thousands of clients visiting my site every month, and I would like to protect them around and at the site. Is it worth ...
tungsten's user avatar
  • 421
35 votes
1 answer

Was actually crazy malware in 2006?

This video shows how somebody accidentally opens instead of He gets flooded with pop-ups, SpySheriff or SpywareSTOP get installed automatically, and the computer user has no ...
neverMind9's user avatar
2 votes
1 answer

My Lantern cloud server has a domain name that looks like typo-squatting, should I be worried?

Lantern is an app to avoid censorship. It is hosted at I just noticed that the cloud server my client is using is actually Notice the i in getiantern ...
Nicolas Raoul's user avatar
0 votes
2 answers

Is Google Drive security compromised?

Today when I visited, I was auto-directed to After clicking on "Exit Now" on that page I was redirected to
user13107's user avatar
  • 173