Typosquatting API

Reported Context (4)

First, we queried the domain IoCs on Typosquatting API and discovered that 14 of them appeared in seven typosquatting groups with 3—8 members each bulk-registered between 18 May 2022 and 25 March 2026. Group-IB Maps GHOST STADIUM’s FIFA 2026 Phishing Infrastructure
We then queried the domain IoCs on Typosquatting API and discovered that one—crypto-stroe[.]cc—was bulk-registered with two look-alikes—crypto-stroe[.]top and crypto-stroe[.]cn—on 9 September 2025. Researchers Analyze Infrastructure Behind FakeWallet Crypto-Wallet Phishing
We then queried the domain IoCs on Typosquatting API and discovered that the domain IoC triplek[.]co[.]za was bulk-registered with two look-alikes—triplex[.]industries and triplea[.]pl. DNS Analysis Maps 90 Domains Linked to Pushpaganda Scareware Campaign
Our Typosquatting API searches, meanwhile, showed that one domain IoC connected to APT42 was bulk-registered with two look-alikes on 14 April 2025. DNS and WHOIS Analysis Maps Infrastructure Linked to Eight Iran-Affiliated APT Groups

Malware (1)

Threat Actors (25)

MITRE ATT&CK (9)

Vendors (3)

Products (4)

Tools (12)

Industries (8)

Countries (5)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.