How Hackers Use "Typosquatting" to Trick You (and How to Spot It)
Jean-Vincent QUILICHINI
The Art of the Typo
Have you ever typed gogle.com instead of google.com? Hackers count on it. Typosquatting (or URL hijacking) is a technique where attackers register domains that are very similar to popular websites, hoping you'll make a mistake.
Common Typosquatting Tactics
- The Missed Key:
facebok.com(missing 'o'). - The Fat Finger:
twitter.comvstwiiter.com(keys near each other). - The Wrong Extension:
amazon.netinstead ofamazon.com. - The Combo:
apple-support.com(adding words to look official).
The Danger
If you land on a typosquatted site, it might look exactly like the real thing.
- Phishing: You enter your login details, and the hacker captures them.
- Malware: The site automatically downloads a virus to your computer.
- Ad Fraud: You are bombarded with spammy ads.
How to Spot a Fake Domain
- Check the URL: Look closely at the address bar. Is it
microsoft.comorrnicrosft.com? - Use a URL Scanner: Before clicking a link in an email, copy and paste it into our URL Scanner. We'll tell you if the domain is suspicious or malicious.
- Bookmark Important Sites: Don't type your bank's URL every time. Use a bookmark to ensure you always go to the right place.
Your eyes can be tricked, but data doesn't lie. Always verify the domain before you trust the site.
Protect Your Infrastructure
Check any IP or domain against our threat intelligence database with 500M+ records.
Try the IP / Domain Checker