Have I Been Squatted

The intelligence and response layer for adversary infrastructure.

Learn more and get started ⬇️

[Have I Been Squatted @beensquatted]

Have I Been Squatted registered аррӏө.com.

It looks like Apple’s website address, but it’s a completely separate domain using different characters.

We registered 20 lookalike .com domains in total as part of our latest research. Here’s what we found.

1/5 ⬇️

[Have I Been Squatted @beensquatted]

Add it from the Claude Connectors directory, install the plugin in Claude Code, Codex or GitHub Copilot CLI, or connect any MCP client. ChatGPT workspace admins can add it today; the public listing is coming soon.

One-click setup for every client: https://t.co/3NADY8VZFi

5/5

[Have I Been Squatted @beensquatted]

Have I Been Squatted now works inside your AI agent.

Ask Claude, Codex, GitHub Copilot, Cursor or Slack to find lookalike domains, check what they serve and act on what you find.

1/5 ⬇️

[Have I Been Squatted @beensquatted]

Respond.

"Make this a rule, block in Defender."

Your agent can create a detection rule, send a finding to your SIEM, block a domain or open a takedown case, depending on your plan. Changes need an org admin, and your app asks you to confirm.

4/5 ⬇️

[Polymarket Japan @polymarketjapan]

【話題】「apple. com」そっくりの偽URL、Chromeで警告が出ない例

英字にそっくりな別の文字を使い、本物とは異なるURLを作成

apple：英字
аррӏе：キリル文字
※この比較は2017年の例

今回の研究では最後の「е」を「ө」に変え、Chromeの偽装対策をすり抜ける例を実証

[ܛܔܔܔܛܔܛܔܛ @skocherhan]

@polymarketjapan cc @beensquatted

[Have I Been Squatted @beensquatted]

Have I Been Squatted registered аррӏө.com.

It looks like Apple’s website address, but it’s a completely separate domain using different characters.

We registered 20 lookalike .com domains in total as part of our latest research. Here’s what we found.

1/5 ⬇️

[Have I Been Squatted @beensquatted]

A quick look at how this works:

аррӏө.com ➡️ https://t.co/d8jwNpvDVq

[Have I Been Squatted @beensquatted]

Have I Been Squatted registered аррӏө.com.

It looks like Apple’s website address, but it’s a completely separate domain using different characters.

We registered 20 lookalike .com domains in total as part of our latest research. Here’s what we found.

1/5 ⬇️

[Have I Been Squatted @beensquatted]

We’ve shared all 20 examples, screenshots, and practical ways to defend against these lookalikes in the full research:
https://t.co/U8LmPjAQ5X

5/5 ✅

[Have I Been Squatted @beensquatted]

We’ve shared all 20 examples, screenshots, and practical ways to defend against these lookalikes in the full research:

https://t.co/U8LmPjAQ5X

5/5

[Have I Been Squatted @beensquatted]

In an attacker’s hands, similar domains could make fake sign-in pages and fraudulent emails harder to spot, putting accounts and payments at risk.

It’s a reminder to pair visual checks with domain monitoring, email defenses, and passkeys.

4/5 ⬇️

[Soroush Dalili @irsdl]

I saw this talk in @BSidesChelt by @beensquatted and it looks interesting: https://t.co/RJ7r11e36c

[ܛܔܔܔܛܔܛܔܛ @skocherhan]

BSides Cheltenham with @beensquatted
#BSidesChelt @BSidesChelt