, also known as URL hijacking , is a form of cybersquatting where attackers register domain names that are slight misspellings or variations of popular, legitimate websites. This opportunistic social engineering attack relies on the simple fact that users often make errors when typing a URL into their browser's address bar. Common Typosquatting Techniques Attackers use several methods to capture mistyped traffic:
: Replacing letters with similar-looking characters, such as paypa1.com instead of paypal.com .
: Reversing the order of letters, such as micrsoft.com .
: Adding or removing a hyphen from a brand name (e.g., face-book.com ). Malicious Motives
: Using different top-level domains like .org , .co , or .om instead of .com .
: Doubling or omitting letters (e.g., faacebook.com or gogle.com ).
Once a user lands on a hijacked URL, the site may be used for several harmful purposes: Typosquatting Explained: Why URL Hijacking Hurts Business