The Landscape of Domain Name Typosquatting: Techniques and Countermeasures

Abstract

Abstract-With more than 294 million registered domain names as of late 2015, the domain name ecosystem has evolved to become a cornerstone for the operation of the Internet. Domain names today serve everyone, from individuals for their online presence to big brands for their business operations. Such ecosystem that facilitated legitimate business and personal uses has also fostered "creative" cases of misuse, including phishing, spam, hit and traffic stealing, online scams, among others. As a first step towards this misuse, the registration of a legitimatelylooking domain is often required. For that, domain typosquatting provides a great avenue to cybercriminals to conduct their crimes.In this paper, we review the landscape of domain name typosquatting, highlighting models and advanced techniques for typosquatted domain names generation, models for their monetization, and the existing literature on countermeasures. We further highlight potential fruitful directions on technical countermeasures that are lacking in the literature.

Unravelling Ariadne’s Thread: Exploring the Threats of Decentralised DNS

“…In the case of Namecoin, the periodic renewal mechanism, as well as the fact of only controlling one TLD, allows a higher degree of control. Yet, both blockchains have 34 https://blockchain-dns.info/explorer/ similar patterns and user behaviours as analysed in Sections IV-B and IV-C. As such, more robust mechanisms have to be implemented in the future to avoid deviant behaviours. These mechanisms should cover the whole registrar procedure in an end-to-end manner, from the auction systems (e.g.…”

Funny Accents: Exploring Genuine Interest in Internationalized Domain Names

“…Domain squatting Domain names can be exploited for deceiving end users: involuntary errors redirect traffic to unintended destinations [3,15,16,50,63,67,69], while credible domain names may create the perception of dealing with a legitimate party [34,43,48]. Spaulding et al [61] reviewed techniques to generate, abuse and counteract deceptive domains. Liu et al [41] found 1 497 IDNs that combine domains from Alexa's top 1 000 with keywords containing non-ASCII characters.…”

A Smörgåsbord of Typos: Exploring International Keyboard Layout Typosquatting

“…Spaulding et al [33] reviewed the typosquatting landscape, listing the models used to generate deceptive domains, the features that suggest a higher probability of typosquatting, the monetization strategies of the squatters and potential countermeasures. They also compared the effectiveness of typosquatting techniques through a user study [34].…”