--- title: Typosquat Warning | daily.dev description: A warning about typosquatting attacks targeting a well-known tech content creator's domain. Visiting misspelled versions of the domain (christits.com and... canonical: https://daily.dev/posts/typosquat-warning-uwj4bdswu twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Typosquat Warning | daily.dev og:description: A warning about typosquatting attacks targeting a well-known tech content creator's domain. Visiting misspelled versions of the domain (christits.com and... og:url: https://daily.dev/posts/typosquat-warning-uwj4bdswu og:image: https://api.daily.dev/og/posts/uWJ4bDSwU.png og:image:alt: Typosquat Warning og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Typosquat Warning **[Chris Titus Tech](https://daily.dev/sources/christitustech)** · 1 min read · 3 upvotes · 1 comments ## Summary A warning about typosquatting attacks targeting a well-known tech content creator's domain. Visiting misspelled versions of the domain (christits.com and christitu) installs malware, though it may appear to run the intended utility. Users are advised to be careful when running PowerShell commands and to use only the correct official domain. Credit is given to Eric Parker for surfacing the issue. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What is domain typosquatting and how does it lead to malware installation via PowerShell? Domain typosquatting registers misspelled or lookalike domains of legitimate sites to trick visitors into visiting them by mistake. In this case, lookalike domains impersonating a legitimate tech utility site serve PowerShell install commands that install malware instead of the intended utility, so users should double check the exact URL before copying and running any PowerShell command from a website. _Verifying script sources before running them matters more than ever; daily.dev surfaces security warnings like typosquatting scams for developers._ ## Community discussion Top comments from developers on daily.dev. **@olikon** · 3 upvotes > Never thought this could be a way to sabotage Windows ## Similar posts on daily.dev - [ClickFix techniques evolve in new infostealer campaigns](https://daily.dev/posts/clickfix-techniques-evolve-in-new-infostealer-campaigns-mufrpsfhw) · CSO Online · 0 upvotes · 0 comments - [ClickFix Attacks Abuses DNS Lookup Command to Deliver ModeloRAT](https://daily.dev/posts/clickfix-attacks-abuses-dns-lookup-command-to-deliver-modelorat-kjxanvy1v) · Dark Reading · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#malware](https://daily.dev/tags/malware), [#powershell](https://daily.dev/tags/powershell) [View this post on daily.dev](https://daily.dev/posts/typosquat-warning-uwj4bdswu) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Typosquat Warning","url":"https://daily.dev/posts/typosquat-warning-uwj4bdswu","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/typosquat-warning-uwj4bdswu"},"datePublished":"2026-07-16T19:56:44.825Z","dateModified":"2026-09-13T21:05:29.692Z","description":"A warning about typosquatting attacks targeting a well-known tech content creator's domain. Visiting misspelled versions of the domain (christits.com and...","image":"https://i.ytimg.com/vi/296kELdzRsc/sddefault.jpg","thumbnailUrl":"https://i.ytimg.com/vi/296kELdzRsc/sddefault.jpg","isAccessibleForFree":true,"articleSection":"Chris Titus Tech","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Chris Titus Tech","logo":"https://media.daily.dev/image/upload/s--4e28ySkK--/f_auto/v1710504019/logos/christitustech","url":"https://daily.dev/sources/christitustech"},"commentCount":1,"discussionUrl":"https://daily.dev/posts/typosquat-warning-uwj4bdswu","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":3},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":1}],"keywords":"security,malware,powershell","timeRequired":"PT1M","video":{"@type":"VideoObject","name":"Typosquat Warning","description":"A warning about typosquatting attacks targeting a well-known tech content creator's domain. Visiting misspelled versions of the domain (christits.com and...","thumbnailUrl":"https://i.ytimg.com/vi/296kELdzRsc/sddefault.jpg","uploadDate":"2026-07-16T19:56:44.825Z","duration":"PT1M","url":"https://api.daily.dev/r/uWJ4bDSwU","embedUrl":"https://www.youtube.com/embed/296kELdzRsc"}} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Chris Titus Tech","item":"https://daily.dev/sources/christitustech"},{"@type":"ListItem","position":3,"name":"Typosquat Warning"}]} {"@context":"https://schema.org","@type":"WebPage","@id":"https://daily.dev/posts/typosquat-warning-uwj4bdswu","comment":[{"@type":"Comment","text":"Never thought this could be a way to sabotage Windows","datePublished":"2026-07-17T03:03:18.542Z","url":"https://daily.dev/posts/uWJ4bDSwU#c-MBJDlTXH9","author":{"@type":"Person","name":"olikon","url":"https://daily.dev/olikon","image":"https://media.daily.dev/image/upload/s--rjmSXYwK--/f_auto/v1715487286/avatars/avatar_o3kYSMsaEBqkLtkK2hu3a"},"interactionStatistic":{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":3}}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/typosquat-warning-uwj4bdswu#faq","mainEntity":[{"@type":"Question","name":"What is domain typosquatting and how does it lead to malware installation via PowerShell?","acceptedAnswer":{"@type":"Answer","text":"Domain typosquatting registers misspelled or lookalike domains of legitimate sites to trick visitors into visiting them by mistake. In this case, lookalike domains impersonating a legitimate tech utility site serve PowerShell install commands that install malware instead of the intended utility, so users should double check the exact URL before copying and running any PowerShell command from a website. Verifying script sources before running them matters more than ever; daily.dev surfaces security warnings like typosquatting scams for developers."}}]} ```