Chameleon typo squatters are nothing new, but I have never blogged about them so I thought I would share with people on what they are and how to spot them. If you look up a domain name’s whois record the domain appears to be owned by the legitimate owner however that is never the case with a chameleon. These domains hide in plain sight and use victim’s contact information instead of their own. They can be spotted a few ways. One, the email may be the only thing wrong in the record. Two, the administrative email may be correct but the domain is at a registrar that the owner never uses. I was looking up GoogleWishes.com the other day and I spotted a Chameleon.
Detection is often easier if the victim keeps their domains at one registrar then it is actually very easy to spot them.
Source DomainTools