Questions tagged [typosquatting]
Practice of registering domain names that may be mistaken for widely used sites (e.g. `googe.com` instead of `google.com`) when the user tries to type in the URL. May be used for phishing credentials and/or spreading malware.
8
questions
2
votes
4
answers
303
views
Why don't bigger companies buy similar domains to their main domain to prevent typosquatting?
One big threat out there is typosquat domains. For example instead of:
steamcommunity.com some malicious actor will register the domain stearncornmunity.com and set up his fake steam login.
Why do ...
- 41
0
votes
1
answer
137
views
Protecting an external authentication server against CSRF
I have a web application which uses an external authentication server for obtaining a session. When a client tries to login, the browser is making requests towards the external authentication server ...
- 23
3
votes
2
answers
237
views
How much damage can a malicious package do with just "npm install <package>"?
I had a typo and npm installed something that is similar in name to something very popular -- I was concerned about typosquatting. It's quite plausibly legitimate and just a coincidence. I looked at ...
- 31
2
votes
0
answers
63
views
Has someone quantified how much more effective typodomains are than random websites in phishing attacks?
Has someone done an actual study on how effective typo domains are versus random websites in phishing links?
I am trying to justify the expense of going after typosquatters and the possibility of the ...
- 121
3
votes
4
answers
440
views
Should I buy nonsense domains just to make sure my clients don't visit a misspelled domain?
I have my new website to be published (it's called buysteel.com). I will have thousands of clients visiting my site every month, and I would like to protect them around and at the site. Is it worth ...
- 421
36
votes
1
answer
19k
views
Was Goggle.com actually crazy malware in 2006?
This video shows how somebody accidentally opens Goggle.com instead of Google.com. He gets flooded with pop-ups, SpySheriff or SpywareSTOP get installed automatically, and the computer user has no ...
- 479
2
votes
1
answer
353
views
My Lantern cloud server has a domain name that looks like typo-squatting, should I be worried?
Lantern is an app to avoid censorship. It is hosted at getlantern.org.
I just noticed that the cloud server my client is using is actually roundrobin.getiantern.org
Notice the i in getiantern ...
- 1,276
0
votes
2
answers
1k
views
Is Google Drive security compromised?
Today when I visited drive.google.com, I was auto-directed to http://drive.googe.com/router.php
After clicking on "Exit Now" on that page I was redirected to http://globalreward-zone.sweepclam.eu/...
- 173