---
title: Hunt: 'TypoPrompting', 186 typo domains of 27 AI brands lead to ClickFix PowerShell, a Store-signed browser hijacker and search-hijack extensions | ctxsec
url: https://ctxsec.com/items/hunt-island-typoprompting-186-ai-typosquat-domains-clickfix-net-guard-search-hijack-extensions
description: "Island traced 186 lookalike domains for AI tools including ChatGPT (25), Claude (18), DeepSeek (16), Runway, Perplexity, Lovable, Character.ai, Gemini, Copilot, Grok, Mistral, Midjourney, ElevenLabs and Cursor. Mistyped visits go through a traffic distribution system to one of three routes: a fake Cloudflare check that makes Windows users paste a hidden PowerShell command fetched from a decimal-encoded IP address; fake 'Security Check' pages serving Net Guard, a Microsoft Store-signed app that hijacks the existing browser and can run remote scripts through DevTools; or one of 30 search-hijack extensions from the same kit (17 still listed, 972,000 declared users)."
status: "vendor research (Island, Nov 2026; reported by The Hacker News Nov 12)"
published: 2026-11-12
---

> Island traced 186 lookalike domains for AI tools including ChatGPT (25), Claude (18), DeepSeek (16), Runway, Perplexity, Lovable, Character.ai, Gemini, Copilot, Grok, Mistral, Midjourney, ElevenLabs and Cursor. Mistyped visits go through a traffic distribution system to one of three routes: a fake Cloudflare check that makes Windows users paste a hidden PowerShell command fetched from a decimal-encoded IP address; fake 'Security Check' pages serving Net Guard, a Microsoft Store-signed app that hijacks the existing browser and can run remote scripts through DevTools; or one of 30 search-hijack extensions from the same kit (17 still listed, 972,000 declared users).

[← Threat Hunting](/hunting) · [markdown](/items/hunt-island-typoprompting-186-ai-typosquat-domains-clickfix-net-guard-search-hijack-extensions.md)

vendor research (Island, Nov 2026; reported by The Hacker News Nov 12)

2026-11-12 11:37 AM ET

### Hunt: 'TypoPrompting', 186 typo domains of 27 AI brands lead to ClickFix PowerShell, a Store-signed browser hijacker and search-hijack extensions

- **Examples:** `cloude[.]ai`, `clsude[.]ai`, `cluade[.]ai`, `caude[.]ai`, `chatgpy[.]com`, `chtgpt[.]com`, `deepseel[.]com`, `deeepseek[.]com`, `runawayml[.]com`, `perplixity[.]ai`, `lovabe[.]dev`, `charactor[.]ai`.
- **Redirect chain:** `xml.securetrackingnode[.]com/click` → `biomimicrydevtech[.]buzz` → random subdomain of `blockchainfuturedev[.]buzz` (FingerprintJS profile plus MD5 proof-of-work before the lure).
- **Endpoint:** `explorer.exe` → `powershell.exe` from the Run dialog right after browsing; PowerShell fetching from a URL with a decimal IP; installs of a 'Net Guard' Store app; browsers launched with remote debugging enabled.
- **Prevent:** block newly registered and typo domains of the AI tools you allow, pin approved AI URLs as bookmarks/SSO tiles, and restrict extension installs to an allowlist.

Sources: [Island: TypoPrompting: From AI Typos to Malware (Nov 2026)](https://www.island.io/blog/typoprompting-from-ai-typos-to-malware) · [The Hacker News: 186 Fake AI Domains Redirect Users to ClickFix Lures, Browser Malware, and Search Hijackers (Nov 12, 2026)](https://thehackernews.com/2026/11/186-fake-ai-domains-redirect-users-to.html)