SESKStuff Everyone Should Know
SESK: Stuff Everyone Should Know · sesk.info/secplus-typosquatting

Registering a domain that looks like a real one, such as exmple.com, is called what?

Typosquatting, a lookalike domain that catches typing mistakes.

Start playing free

  1. Typosquatting ✔
  2. Cache poisoning
  3. Domain hijacking

Why: Attackers register near-miss domains, such as swapped letters or a different top-level domain, to catch typos or fool readers. Always check the exact address.

Huh, didn't know that: MITRE ATT&CK notes attackers can also use internationalized domain names to create homograph lookalikes.

The dad joke
Typosquatters make a living from our typing. They really have a way with errors.
Like this card?
Play the game

References

Answer: Typosquatting. Attackers register near-miss domains, such as swapped letters or a different top-level domain, to catch typos or fool readers. Always check the exact address.

  1. MITRE ATT&CK T1583.001, Acquire Infrastructure: Domains attack.mitre.org/techniques/T1583/001
    Adversaries may choose domains that are similar to legitimate domains, including through use of homoglyphs or use of a different top-level domain (TLD).
    Checked 2026-10-10.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game

Security & PrivacyTricking a person into revealing information or taking a harmful action is called what?Security & PrivacyWhat is phishing called when it targets a specific person, company or industry?Security & PrivacyPhishing carried out over a phone call is commonly called what?

That's stuff everyone should know.