# Typosquatting

Registering domain names that closely resemble a legitimate website, relying on users mistyping the real address.

**Typosquatting[↗](/typosquatting)** is the practice of registering a domain name that closely resembles a well-known website, banking on the fact that users occasionally mistype an address, for example gmial.com instead of gmail.com. Visitors who land on the fake site by accident may be shown ads, tricked into entering login credentials, or served malware[↗](/malware).

Attackers also use typosquatted domains for phishing[↗](/phishing) emails, since a lookalike address can slip past a quick glance. Always double-check a URL before entering credentials, and consider bookmarking sites you use often rather than typing the address each time.