Title
A Smörgåsbord of Typos: Exploring International Keyboard Layout Typosquatting
Abstract
Typosquatting is the malicious practice of registering domains that result from typos made when users try to visit popular domains. Previous works have only considered the US English keyboard layout, but of course other layouts are widely used around the world. In this paper, we uncover how typosquatters are also targeting communities that use these other layouts by examining typo domains on non-US English keyboards for 100 000 popular domains. We find that German users are the most targeted, with over 15 000 registered typo domains. Companies such as Equifax and Amazon have defensively registered such domains but are often incomplete; moreover, other major companies ignore them altogether and allow malicious actors to capitalize on their brand. Parking domains or advertising them for sale remains the most popular monetization strategy of squatters on at least 40% of registered domains, but we also see more harmful practices, such as a scam website that spoofs a local newspaper. This proves that domain squatters also consider typos on non-US English keyboards to be valuable, and that companies should be more alert in claiming these domains.
Year
DOI
Venue
2019
10.1109/SPW.2019.00043
2019 IEEE Security and Privacy Workshops (SPW)
Keywords
Field
DocType
Typosquatting,Web Security,Domain Name System,Internationalization
Internet security,Internet privacy,Keyboard layout,Internationalization,Computer science,Domain Name System,Newspaper,Monetization,German,Typosquatting
Conference
ISBN
Citations 
PageRank 
978-1-7281-3509-0
0
0.34
References 
Authors
12
3
Name
Order
Citations
PageRank
Victor Le Pochat1304.09
Tom van Goethem213611.77
Wouter Joosen32898287.70