Typosquatting and Domain Impersonation

Attackers register domains similar to legitimate ones.

Techniques

- Typos: gooogle.com
- Homoglyphs: goog1e.com
- TLD variants: google.co
- Subdomain tricks: google.com.attacker.com
- Punycode: xn--googl.com

Risks

- Credential theft
- Malware distribution
- Brand impersonation
- Email interception

Protection

- Register similar domains
- DMARC enforcement
- Brand monitoring services
- Employee awareness
- DNS filtering