Typosquatting is the practice of registering a domain that visually or textually resembles a real brand — via a single-character typo, a homoglyph swap, a TLD change, a brand-suffix add, or a punycode Unicode trick — with the intent to trap users who mistype, misread, or trust surface-level signals like a valid SSL padlock.