Typosquatting

Registering domain names that closely resemble legitimate ones, relying on misspellings or visual similarity to deceive victims or evade scrutiny. Beyond phishing, attackers use typosquatted infrastructure for command-and-control, as StyleSmuggler did with fake time-service domains like time.microsft.run.