Skip to main content
OverflowAI is here! AI power for your Stack Overflow for Teams knowledge community. Learn more

Questions tagged [typosquatting]

Practice of registering domain names that may be mistaken for widely used sites (e.g. `googe.com` instead of `google.com`) when the user tries to type in the URL. May be used for phishing credentials and/or spreading malware.

Filter by
Sorted by
Tagged with
0 votes
1 answer
171 views

How to prevent credential stealing of customers via phishing and domain squatting

Threat actors are creating lookalike domains (ex. Telecom.com to te1ecom.com), and using those to phish users for credentials (not employees). They’re getting the MFA tokens, too. What could be done ...
Kumar's user avatar
  • 1
2 votes
4 answers
576 views

Why don't bigger companies buy similar domains to their main domain to prevent typosquatting?

One big threat out there is typosquat domains. For example instead of: steamcommunity.com some malicious actor will register the domain stearncornmunity.com and set up his fake steam login. Why do ...
birdd's user avatar
  • 41
0 votes
1 answer
208 views

Protecting an external authentication server against CSRF

I have a web application which uses an external authentication server for obtaining a session. When a client tries to login, the browser is making requests towards the external authentication server ...
ficabj5's user avatar
  • 23
3 votes
2 answers
368 views

How much damage can a malicious package do with just "npm install <package>"?

I had a typo and npm installed something that is similar in name to something very popular -- I was concerned about typosquatting. It's quite plausibly legitimate and just a coincidence. I looked at ...
user237586's user avatar
2 votes
0 answers
93 views

Has someone quantified how much more effective typodomains are than random websites in phishing attacks?

Has someone done an actual study on how effective typo domains are versus random websites in phishing links? I am trying to justify the expense of going after typosquatters and the possibility of the ...
Chas. Owens's user avatar
3 votes
4 answers
514 views

Should I buy nonsense domains just to make sure my clients don't visit a misspelled domain?

I have my new website to be published (it's called buysteel.com). I will have thousands of clients visiting my site every month, and I would like to protect them around and at the site. Is it worth ...
tungsten's user avatar
  • 421
35 votes
1 answer
26k views

Was Goggle.com actually crazy malware in 2006?

This video shows how somebody accidentally opens Goggle.com instead of Google.com. He gets flooded with pop-ups, SpySheriff or SpywareSTOP get installed automatically, and the computer user has no ...
neverMind9's user avatar
2 votes
1 answer
396 views

My Lantern cloud server has a domain name that looks like typo-squatting, should I be worried?

Lantern is an app to avoid censorship. It is hosted at getlantern.org. I just noticed that the cloud server my client is using is actually roundrobin.getiantern.org Notice the i in getiantern ...
Nicolas Raoul's user avatar
0 votes
2 answers
1k views

Is Google Drive security compromised?

Today when I visited drive.google.com, I was auto-directed to http://drive.googe.com/router.php After clicking on "Exit Now" on that page I was redirected to http://globalreward-zone.sweepclam.eu/...
user13107's user avatar
  • 173