Domain squatting
1 min read
Pronunciation
[doh-mayn skwot-ing]
Analogy
Like someone parking their boat in front of your house’s dock so you have to pay them to move it.
Definition
The practice of registering domain names—often similar to established brands or projects—with the intent to profit from resale or to mislead users.
Key Points Intro
Domain squatting exploits brand recognition and user typos for gain or phishing.
Key Points
Typosquatting: Registering misspelled variants of popular domains.
Cybersquatting: Holding domains to sell at inflated prices.
Phishing risk: Squatted domains host fake login pages.
Legal recourse: UDRP and trademark disputes.
Example
An attacker registers “micr0soft.com” to capture mistyped login credentials from users.
Technical Deep Dive
Squatter uses WHOIS privacy and auto‑renew scripts to hold domain. Phishing kits deployed on squat site; SSL obtained via Let’s Encrypt to appear legitimate.
Security Warning
Always verify domain spelling and certificate details before entering credentials.
Caveat
Defending against squatting can be costly and time‑consuming for brand owners.
Domain squatting - Related Articles
No related articles for this term.