Interesting. Tell me, is the affiliate stuff mentioned in the article actually illegal?
Practical waterholing through DNS typosquatting
11–15 of 15 posts
Re: Practical waterholing through DNS typosquatting
#12Interesting. Tell me, is the affiliate stuff mentioned in the article actually illegal?
It's almost certainly against the TOS for the affiliate program in question.
Re: Practical waterholing through DNS typosquatting
#13Thinking about high-profile domains: there are no close attacks on .gov (.gop is closest), but .mil is subject to both .mit (not so close) and .ml (Mali, quite close) attacks.
Re: Practical waterholing through DNS typosquatting
#14Hard to believe that many big traffic sites haven't bothered to snatch up any/all similar domains.
Re: Practical waterholing through DNS typosquatting
#15Another interesting approach is rely on cosmic background noise bit flips. Do it on Google.com and you can get a few thousand visitors a week I.e. Register a domain where the ASCII representaton is 1 bit off.
ISnt it more likely that it is just bots, that know your domain cos they have lists of every domain for that tld?
I didn't read the paper, but you'd know it'd bit squatting if the domain a-azon.com is hit with a HTTP Host header of amazon.com.