Editing Domain name (section)

==Domain name spoofing==
The term '''Domain name spoofing''' (or simply though less accurately, '''Domain spoofing''') is used generically to describe one or more of a class of [[phishing]] attacks that depend on falsifying or misrepresenting an internet domain name.<ref>{{cite news |title= Canadian banks hit by two-year domain name spoofing scam |work= Finextra |url= https://www.finextra.com/newsarticle/35030/canadian-banks-hit-by-two-year-domain-name-spoofing-scam |date= 9 January 2020 |access-date= 27 August 2021 |archive-date= 6 November 2021 |archive-url= https://web.archive.org/web/20211106230249/https://www.finextra.com/newsarticle/35030/canadian-banks-hit-by-two-year-domain-name-spoofing-scam |url-status= live }}</ref><ref>{{cite web | title =Domain spoofing | publisher =[[Barracuda Networks]] | url =https://www.barracuda.com/glossary/domain-spoofing | access-date =2021-08-27 | archive-date =2021-11-04 | archive-url =https://web.archive.org/web/20211104200153/https://www.barracuda.com/glossary/domain-spoofing | url-status =live }}</ref> These are designed to persuade unsuspecting users into visiting a web site other than that intended, or opening an email that is not in reality from the address shown (or apparently shown).<ref>{{cite news |title=Mass Spoofing Campaign Abuses Walmart Brand |work=threatpost |author=Tara Seals |date=August 6, 2019 |url=https://threatpost.com/mass-spoofing-campaign-walmart/146994/ |access-date=August 27, 2021 |archive-date=November 6, 2021 |archive-url=https://web.archive.org/web/20211106193434/https://threatpost.com/mass-spoofing-campaign-walmart/146994/ |url-status=live }}</ref> Although website and email spoofing attacks are more widely known, any service that relies on [[Name resolution (computer systems)|domain name resolution]] may be compromised.

===Types===
There are a number of better-known types of domain spoofing:
* [[Typosquatting]], also called "URL hijacking", a "sting site", or a "fake URL", is a form of [[cybersquatting]], and possibly [[brandjacking]] which relies on mistakes such as [[typographical error|typos]] made by Internet users when inputting a [[URL|website address]] into a [[web browser]] or composing an [[email address]]. Should a user accidentally enter an incorrect domain name, they may be led to any URL (including an alternative website owned by a cybersquatter).<ref>{{Cite web|title=Example Screenshots of Strider URL Tracer With Typo-Patrol|url=http://research.microsoft.com/en-us/um/redmond/projects/strider/urltracer/Parked_Domains.htm|work=Microsoft Research|archive-url=https://web.archive.org/web/20081221214435/http://research.microsoft.com/en-us/um/redmond/projects/strider/urltracer/Parked_Domains.htm|archive-date=21 December 2008|url-status=dead}}</ref>

:The typosquatter's [[Uniform Resource Locator|URL]] will usually be one of five kinds, all ''similar to'' the victim site address:
<!-- Do NOT give any examples of misspelled  domain names. "examlpe.com"  currently leads to a site that tries to load malware on your computer. -->
:*A common misspelling, or foreign language spelling, of the intended site
:*A misspelling based on a typographical error
:*A plural of a singular domain name
:*A different [[top-level domain]]: (i.e. .com instead of .org)
:*An abuse of the [[country code top-level domain|Country Code Top-Level Domain]] (ccTLD) (.cm, .co, or .om instead of .com)

* [[IDN homograph attack]]. This type of attack depends on registering a domain name that is similar to the 'target' domain, differing from it only because its spelling includes one or more characters that come from a different alphabet but look the same to the naked eye. For example, the [[Cyrillic]], [[Latin]], and [[Greek alphabet|Greek]] alphabets each have their own letter {{char|A}}, each of which has its own binary [[code point]]. [[Turkish language|Turkish]] has a [[Dotless I|dotless letter i]] ({{char|ı}}) that may not be perceived as different from the ASCII letter {{char|i}}. Most web browsers warn of 'mixed alphabet' domain names,<ref>{{Cite web |title=Internationalized Domain Names (IDN) in Google Chrome |url=https://chromium.googlesource.com/chromium/src.git/+/master/docs/idn.md |access-date=2020-08-26 |website=chromium.googlesource.com |archive-date=2020-11-01 |archive-url=https://web.archive.org/web/20201101105735/https://chromium.googlesource.com/chromium/src.git/+/master/docs/idn.md |url-status=live }}</ref><ref>{{Cite web |date=2017-04-21 |title=Upcoming update with IDN homograph phishing fix - Blog |url=https://blogs.opera.com/security/2017/04/upcoming-update-idn-homograph-phishing-fix/ |access-date=2020-08-26 |website=Opera Security |archive-date=2020-08-08 |archive-url=https://web.archive.org/web/20200808094909/https://blogs.opera.com/security/2017/04/upcoming-update-idn-homograph-phishing-fix/ |url-status=live }}</ref><ref>{{cite web|url=https://support.apple.com/kb/TA22996|access-date=2017-04-29|title=About Safari International Domain Name support|archive-date=2014-06-17|archive-url=https://web.archive.org/web/20140617175411/http://support.apple.com/kb/TA22996|url-status=live}}</ref><ref>{{cite web |title=IDN Display Algorithm |publisher=Mozilla |url=https://wiki.mozilla.org/IDN_Display_Algorithm |access-date=2016-01-31 |archive-date=2016-01-31 |archive-url=https://web.archive.org/web/20160131105117/https://wiki.mozilla.org/IDN_Display_Algorithm |url-status=live }}</ref> Other services, such as email applications, may not provide the same protection. Reputable [[top level domain]] and [[ccTLD|country code domain]] registrars will not accept applications to register a deceptive name but this policy cannot be presumed to be infallible.
* {{Annotated link |DNS spoofing}}
* {{Annotated link | Website spoofing}}
* {{Annotated link |Email spoofing}}

===Risk mitigation ===
* {{Annotated link |Domain Name System Security Extensions}}
* {{Annotated link |Sender Policy Framework}}
* {{Annotated link |DMARC}} ("Domain-based Message Authentication, Reporting and Conformance")
* {{Annotated link |DomainKeys Identified Mail}}
* {{Annotated link |Public key certificate}} (SSL certificate)

===Legitimate technologies that may be subverted===
* {{Annotated link |URL redirection}}
* {{Annotated link |Domain fronting}}