Typosquatting

A typosquatting domain exploits the fact that people make typing mistakes or do not inspect URLs carefully. Attackers may omit a letter, transpose characters or use a visually similar spelling so that a visitor lands on an unrelated site. Some lookalike domains show advertisements; more dangerous versions imitate sign-in pages, collect payments or distribute malware. A similar-looking name is a warning sign, not automatic proof of criminal intent.

For businesses, defensive monitoring includes checking obvious misspellings of important domains, monitoring suspicious certificates or incoming reports, and teaching staff to verify login links before entering passwords. Customers should rely on trusted bookmarks or independently typed addresses for sensitive accounts and review the full domain instead of only a familiar logo. Multi-factor authentication and email domain protections can reduce associated risks but cannot prevent every form of impersonation.

Typosquatting differs from domain hijacking, where an attacker gains control of an existing domain or its registration. It also differs from ordinary competitive naming disputes. If abuse is discovered, preserve evidence, contact the relevant registrar or hosting provider through documented procedures, and seek professional guidance for trademark or fraud matters rather than attempting unauthorized retaliation.