Finding WEIRD Typosquatting Websites

Рет қаралды 219,283

Ай бұрын

jh.live/flare || You can track down shady sellers, hunt for cybercrime, or manage threat intelligence and your exposed attack surface with Flare! Try a free trial and see what info is out there: jh.live/flare
Free Cybersecurity Education and Ethical Hacking with John Hammond
📧JOIN MY NEWSLETTER ➡ jh.live/email
🙏SUPPORT THE CHANNEL ➡ jh.live/patreon
🤝 SPONSOR THE CHANNEL ➡ jh.live/sponsor
🌎FOLLOW ME EVERYWHERE ➡ jh.live/twitter ↔ jh.live/linkedin ↔ jh.live/discord ↔ jh.live/instagram ↔ jh.live/tiktok
💥 SEND ME MALWARE ➡ jh.live/malware
🔥KZfaq ALGORITHM ➡ Like, Comment, & Subscribe!
Music sourced from Artlist.io
Alon Ohana - Parallel Room
Stanley Gurvich - Sunny Days

Пікірлер: 214

@memesfromtheforsakenworlwi9218 Ай бұрын

fun facts, most companies buy as much of those "typo domains" to make them redirect to the real site

@nadroj6381 Ай бұрын

Ah, I was wondering why they kept redirecting to the real site. Cool!!

@Azuuraas 27 күн бұрын

yup, i know for sure google did that

@GOOFLEr 24 күн бұрын

'Most'

@kuromiLayfe 21 күн бұрын

still check if you are on the real site.. as the scammers can spoof the address bar and status bar to show the official url (and of course also the titlebar and all links when using inspector). just takes 3ms to replace what is shown the moment the page or hover is activated.

@BillAnt 19 күн бұрын

Cuz many type "goggle" when typing fast. lol

@kalicxingnjenga9657 Ай бұрын

Please do a video showing what’s inside that APK.

@TomJacobW Ай бұрын

hearted - neat! Looking forward to seeing that!

@infohazard Ай бұрын

I was really annoyed that he didn't do it xD

@IDontModWTFz Ай бұрын

Get APK tool and do it yourself, apks are really easy to re

@posifurg Ай бұрын

Im going to do a vid showing the APK - ill post it when i can

@DEZXD1 Ай бұрын

The apk says failed to download something

@kyokazuto Ай бұрын

"I think that is the real google", he says looking at google from 10 years ago

@mordechajloooo Күн бұрын

interesting

@dinosaurgardening2401 Ай бұрын

I know the guy who bought Google with 3 ooo's. He bought it in high-school because he was smart. He isn't a scammer.

@4rumani Ай бұрын

Yeah very smart lol. Obvious WIPO violation, no legitimate interest, bad faith typosquatting

@Linkman8912 Ай бұрын

@@4rumanichill

@justarandomchannel1319 22 күн бұрын

Bro could prolly sell that for alot tho

@ihatenerds4689 19 күн бұрын

@@4rumaniyou are a sad being

@Limelaz23 19 күн бұрын

@@4rumani y so salty

@bdot02 Ай бұрын

Personally like "guthib"

@wombatpandaa9774 Ай бұрын

Near the beginning I jokingly thought this was going to be an ad segment for Nord VPN but to my pleasant surprise it's an actually really useful FOSS tool. Love to see it.

@Gamerappa Ай бұрын

14:34 google looks like this on certain user agents, it's their old design from 2011-2013

@ExperiencersInternational Ай бұрын

It was funny seeing Goole as one of the screenshots 😂 Had some fun with pronouncing it when driving past signs for that place on the motorway a few months ago

@Fluttergoat Ай бұрын

Isn't a $32/Month virtual server absolutely overpriced and overkill for this? Maybe I just don't know enough about the program or droplets so I'd be curious if there was a genuine reason it had to be that expensive.

@T1C Ай бұрын

Probably could get by on a $5 vps

@tbuk8350 17 күн бұрын

he could've probably done the same thing on oracle always free compute

@cybercub4367 Ай бұрын

Please do reverse engineer that APK, we're bound to find something juicy there 😂

@pitche Ай бұрын

14:33 It's an old Google UI :) Thx for the likes 😆

@U20E0 Ай бұрын

KZfaq actually owns the domain youtobe, apparently

@81gamer81 Ай бұрын

you to be, is actually how its meant to bee. Monkey see monkey do. They decide what you see, and what you do

@unchained_jb Ай бұрын

With adult sites it's even crazier

@dingusbrule5756 Ай бұрын

Lmfao

@Nodsaibot Ай бұрын

zvideos

@oz_jones Ай бұрын

Stop watching corn.

@LeReubzRic Ай бұрын

@@oz_joneswhat about carrots

@kab43 Ай бұрын

@@LeReubzRicno. only peas and cilantro/coriander

@greenockscatman Ай бұрын

I like the raw realism of the Linux experience at 17:30

@kiwipomegranate Ай бұрын

Please make a part two I wanna see more about that "live (ph)fishing game" and the Amazon typosquat hijinks

@ThisIsJustADrillBit Ай бұрын

Its such a fun rabbit hole watching malicious domains as they are registered. Weird how many of them sre hosted behind cloud flare these days... 🤔

@chigga5years173 Ай бұрын

Why does cloudflare even support them?.. I recently got an sms scam of gettimg rich easily and upon scanning and tryim7to find vulnerabilities of those scammers.. I didn't get anything

@PazLeBon Ай бұрын

cos cheap hosting is slow :)

@chrissametrinequartz9389 Ай бұрын

or it could also be (for whatever reason) that, thats what they are using to manage their domains or smth

@AtlasBit Ай бұрын

I love your videos. Thank you for your efforts to raise awareness.

@circuitgamer7759 Ай бұрын

I would love to see you doing this more, it's just really fun to watch you have fun with it :) Also looking forward to you looking through those files :)

@WebDesignerAmy Ай бұрын

This was a great utility to learn about John! Def found some permutations of some domains I own and those for another creator that came up. ty!

@user-cd4bx6uq1y Ай бұрын

16:59 that's master Rama isn't it? The cult Edit: 19:41 amazing reaction

@monkepog3236 16 күн бұрын

theres even illegal content on it, jail for at least 30 years for hosting it

@Noctuu Ай бұрын

Loved this video, u should do more “unserious” funny videos, either here or on a secondary channel

@zixea3318 14 күн бұрын

Linux users typing the entirety of their computer’s code into the command line just to make a new folder: 🤬🤬🤬

@thesoftone 14 күн бұрын

^ this user knows nothing about computers

@iBridgee Ай бұрын

Who knew typosquatting could be so bizarre? 😅

@purplepeak8575 Ай бұрын

Trying this back on Windows 95-Windows XP days is a guaranteed PC destroyer.

@bokrayoomjdeed Ай бұрын

loved this thanks JOHN ;)

@uuu12343 Ай бұрын

This is genuinely amazing for Typosquat monitoring and intelligence gathering

@skelkankaos 28 күн бұрын

Really enjoyed this video because it's a topic that's interesting and you let it be interesting on its own merits instead of overly sensationalizing it

@februalist4686 13 күн бұрын

WE NEED a continue of this series

@oz_jones Ай бұрын

Youtubs - for all your Jacuzzi needs!

@k1ngslay3r41 Ай бұрын

lol I never noticed you owned a whole island of dinosaurs that's AWESOME!

@rocket01666 Ай бұрын

Crack open that APK next PLEASE!

@EVENCOOLERTHANJOHN 26 күн бұрын

F I S H I N G L I V E G A M E . A P K ( 2 0 )

@nrhowe84 Ай бұрын

That is such a cool tool, would love to see a video on what is inside that apk file. Great video keep up the great work that you do.

@aidi4886 Ай бұрын

I choose you John. Make me smart!!!

@lordvgames Ай бұрын

should do more dnstwist shenanigans, really fun to see what you find

@AKABeestYT 9 күн бұрын

I love the typos for regularly nsfw sites that redirect to sites that ask you to repent and fix your ways

@bokrayoomjdeed Ай бұрын

Hilarious maaan daamn! nice video bro really thanks.

@dannydetonator 19 күн бұрын

As someone not well versed in IT, coding and html, i just learned a bunch of new words here. Typosquatting just made me think of my poor-ass unaccomodated seasonal-worker (initially) eurotrip.

@milentiusgaming Ай бұрын

looking forward to THE video of the breakdown of the APK, maybe there was more to the "nothing" in the empty text file....

@CainXVII 15 күн бұрын

This was great. Would have loved to see some other websites too. And what was actually in that fish file....

@ownmicelio Ай бұрын

Please do a part 2

@abdoudicko5352 Ай бұрын

You are the best

@adamn0 17 күн бұрын

please don’t go to the website at 19:40 i wish i wasn’t curious and went to it i think you should blur out that link or remove that part of the video it’s absolutely disgusting

@zixea3318 14 күн бұрын

yeah there’s CP on there 🤢

@BrimmFate Ай бұрын

Adversaries is a funny way of describing scammer. Like calling them enemies

@lancemarchetti8673 Ай бұрын

Brilliant

@blakeeey27 10 күн бұрын

i love the term typosquatting sm

@cormarcormar 4 күн бұрын

the phishers are just squattin on that typo

@EmanuelLopesS2 Ай бұрын

Thx f9r letting me know about new adult sites 😅

@joebambanchannel Ай бұрын

The best,👍

@kidnamedfingor 24 күн бұрын

Just to let u know, when i went on the googie website, there was some illegal content, if i were you i would cut that part out. I went on that domain i wish i could unsee what i saw.

@jjprisma3d 16 күн бұрын

It’s really traumatizing.

@kidnamedfingor 16 күн бұрын

@@jjprisma3d cant believe he actually let it slip into this video

@jjprisma3d 16 күн бұрын

@@kidnamedfingor Atleast he blurred it.

@jjprisma3d 16 күн бұрын

@@kidnamedfingor And also, whoever's chid was that. I feel bad for the parents. The person who did that shoud be ashamed.

@kidnamedfingor 16 күн бұрын

@@jjprisma3d I translated the Chinese and it said that it was the dad who did it

@pollywops9242 Ай бұрын

Super useful tool

@DerMarkus1982 Ай бұрын

Let's see if Jason will feature John Hammond in a clip compilation soon 😁

@thesoftone 14 күн бұрын

kinda makes me want to try live booting Kali maybe, cool vid

@yewo.m Күн бұрын

This gave me "hacking in movies" vibes

@VaibhavShewale Ай бұрын

well moost of them showing old version and some just ads all over the page

@mikiroido 19 күн бұрын

The true video begins somewhere at 13:00

@ErichSchulz Ай бұрын

It seems to have a domain name size limit when using the web interface.

@stefanjohansson2373 Ай бұрын

16:50 Never seen this?!

@sucra0710 Ай бұрын

Dnstwist it, bop it, pull it

@Ilikeflowers22 19 күн бұрын

Unrelated, but i really like your hair :)

@JohnDoe-bd1qe Ай бұрын

Now I see the true meaning of the minor spelling mistake meme.

@Karman7 22 сағат бұрын

I actually made a typosquatting website that i obviously took down but i was trying to cause drama with other kids at my school at the time. I was copying a website at my school and i talked about the real website talking bad about it saying it was the fake. Then i blamed it on a innocent kid not in the drama... Lets name him Dave. Then i told the Actual creators of the real website saying that Dave stole your website. And thats when they confronted Dave and i was just laughing the whole time... Now i know it is very evil... So then i just decided to take down the website because thats when i realized that i was evil...

@torrtoise Ай бұрын

alternative title: linux working as intended

@MFoster392 Ай бұрын

Very Cool :)

@mattsadventureswithart5764 Ай бұрын

Based on the one guy I met with that first name, its pronounced "Mar cheen" with the "mar" being the same as "mark" without the k, and "cheen" being the same as "cheese", with an n instead of the z sound.

@UltimatePerfection Ай бұрын

Marcin is (roughly) pronounced as Martzin.

@oussemabenayech2345 Ай бұрын

every jhon hammond should get into a fight and see who will earn the name

@PazLeBon Ай бұрын

not a fight, even a dummy can win a fight

@malka1762 Күн бұрын

gotta hand it to the fishing "devs", they're kinda transparent when you think abt it 😂

@Prettypaigexxx 18 күн бұрын

Firefox was a blast from the past😂

@mattnaylor29 Ай бұрын

There is a bank in the uk called first direct. My 80+ year old family went to fist direct, it was a fisting porn site.

@scrungles7853 22 күн бұрын

I have no idea what you're talking about, nice!

@maskstorm2881 22 күн бұрын

Same here

@abdelhay. Ай бұрын

WE WANT MOOORE OF MALWARE ANALYSIS VIDEOS PLEASE.

@STLPhil Ай бұрын

Shameless Plug for John's side Real Estate business

@cherno6592 24 күн бұрын

that fishing live game is advertising as that one gambling game or application, it on Indonesian language

@davidetl8241 Ай бұрын

Cool

@gurukuappannadora8982 Ай бұрын

Excellent stuff but we are missing actually what you are explaining kindly explain your experience in slow motion I feel it something like something that computation is going here

@The_hot_blue_fire_guy Ай бұрын

Is there a program like that website detecting thing for people who use normal operating system like windows or Mac OS and not those hacker OSs like Linux. You know, normal software for normal people that actually exist in the real world.

@Octagon344 9 күн бұрын

1jt+ means 1 million plus.

@rob-890 Ай бұрын

He's doing the thing where he repeats synonyms over and over again 😂😂😂😂

@half-faust 13 күн бұрын

Ah, the eternal internet nemesis: people with the same full name as you.

@Breecheesegeez 27 күн бұрын

i've seen roblox typosquatting websites before

@attilazimler1614 Ай бұрын

Looks like from the gy start for youtube that it is having a base assumption that the keyboard layout is English.

@harrylumsdon6773 Ай бұрын

Chrome and edge has the safe search option??

@purplesam2609 27 күн бұрын

I wanted to go to the SpongeBob website as an 8 year old kid on my grandma's laptop and I found a site with a photo of some random man with a typo

@aryaroxanne3225 Ай бұрын

wow that apk. funny stuff

@SilentOnion 15 күн бұрын

14:33 is not really "strange" google its just the old design from like the late 2000s.

@gamernikan Ай бұрын

cool (there is not your ip at 15:48)

@megafoxatron3rd521 Ай бұрын

the guy can't figure that google is one of the top searches without doing a google search

@kizi86 Ай бұрын

before browsers started to block physing sites, i bought shitton of domains that were typos of google and youtube, and for about a year, i gained a lot of money from ads 😅 but then on a single day, all my passive income stopped sadge

@theappealtoheaven Ай бұрын

Please more of this, also please install the apk. 😂

@v.adithya1768 Ай бұрын

Hi, When i run the --phash command, I get this error even though selenium is already present in /usr/lib/python3/dist-packages dnstwist: error: missing Selenium Webdriver

@Ramonatho 18 күн бұрын

Wait. Hang on. I noticed something about that slots game with the automatic download. On the section that says "The New One" it mentions Bob Slots, a youtube channel I watch, who has never promoted this app. That means they're scraping ultra specific small slots youtubers and saying they're promoting their game. Bob isn't a big channel. This is truly weird stuff.

@methical__ Ай бұрын

Interesting you don't know plesk, is this a europe hosting thing?

@eric_d Ай бұрын

Are you saying TACK when you mean dash or hyphen? That's the weirdest thing I've ever heard!

@RandomGeometryDashStuff 24 күн бұрын

12:43 why didn't it understand --screenshots -t as save screenshots in directory named -t

@iskrassupercoolchannel 29 күн бұрын

@AmCanTech 22 күн бұрын

The site that redirects to aliexpress is likely a 3rd party that outputs their affiliate kink so they earn a commission... even if you dint shop via that link directly, a refer cookie is likely stored such that if you end up shopping within X amount of time they get credit for the sale.