{"id":4161,"date":"2026-11-12T20:22:04","date_gmt":"2026-11-12T20:22:04","guid":{"rendered":"https:\/\/thedigitalfortress.us\/?p=4161"},"modified":"2026-11-12T20:22:04","modified_gmt":"2026-11-12T20:22:04","slug":"186-fake-ai-domains-redirect-users-to-clickfix-lures-browser-malware-and-search-hijackers","status":"publish","type":"post","link":"https:\/\/thedigitalfortress.us\/?p=4161","title":{"rendered":"186 Fake AI Domains Redirect Users to ClickFix Lures, Browser Malware, and Search Hijackers"},"content":{"rendered":"<div id=\"articlebody\">\n<div class=\"separator\" style=\"clear: both;\"><a href=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEirJnc36Fxj4oKOmKhcPvspB_xQpv3VgpXjYnu29SOv8NbVJHeaGNKT26851QIPQbHozxeF5vmq5otdRbJBKEaN9557MtuxLwp5fxX-pQVDVKwvZJtPR9ayT2Njx83svW7TVsVkVpFUOt5JHqhdSkSI7uV0d4dxlf5pWAmHISttTHWjURyOpuuy0CzVCSmK\/s1700-nu-rw-lo-l85-e365\/lauce.jpg\" style=\"display: block;  text-align: center; clear: left; float: left;\"><\/a><\/div>\n<p>Cybersecurity researchers have found that lookalike domains masquerading as artificial intelligence (AI) tools are being used to serve ClickFix-style lures, browser-hijacking malware, and a set of extensions that hijack user searches.<\/p>\n<p>This delivery pattern has been codenamed <strong>TypoPrompting<\/strong> by Island.<\/p>\n<p>\u00abAI-app lookalikes that turn an attempt to reach a familiar tool into a prompt to verify, install or run something else,\u00bb the cybersecurity company said in a <a href=\"https:\/\/www.island.io\/blog\/typoprompting-from-ai-typos-to-malware\" target=\"_blank\">report<\/a> shared with The Hacker News.<\/p>\n<p>In all, the campaign spans 186 bogus domains spanning 27 AI brands, including Anthropic Claude, OpenAI ChatGPT, Google Gemini and Gemini Notebook (formerly NotebookLM), Microsoft Copilot, SpaceXAI Grok, DeepSeek, Mistral, Perplexity, Midjourney, ElevenLabs, Lovable, and Cursor.<\/p>\n<p>While one category leads to a ClickFix lure that serves a PowerShell command via a fake Cloudflare verification page, the second route takes unsuspecting users to \u00abSecurity Check\u00bb pages that deliver a browser-hijacking malware called Net Guard. The third pathway sends users to a search-hijack extension family with 16 live Chrome Web Store listings and 972,000 declared users.<\/p>\n<div class=\"dog_two clear\">\n<div class=\"cf\"><a href=\"https:\/\/thehackernews.uk\/ai-governance-platform-d\" rel=\"nofollow noopener sponsored\" target=\"_blank\"><img loading=\"lazy\" decoding=\"async\" class=\"lazyload\" alt=\"Cybersecurity\" src=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEi9hjzSN2bSutSbaNO6ZWEm02wC6hue03kC4VKPSfsdPvcDX2PAvPE-u9QrLCw3POvN3hXFPlyYyFgkAgtKrs4I2oSb9BkIFOWQ_k1ISfIBdT2AoWNvq2Q2DF_3AyA4fJriKPHkTjqYFxu-Y_H4IH9uqscX8lh-puQ5cPmc_veAEr9p4fC0497XT8Fktlp6\/s728-nu-rw-lo-l85-e365\/tl-insidem-d.jpg\" width=\"729\" height=\"91\"\/><\/a><\/div>\n<\/div>\n<p>Some of the AI lookalike domains are listed below &#8211;<\/p>\n<ul>\n<li>cloude[.]ai<\/li>\n<li>cluade[.]ai<\/li>\n<li>clsude[.]ai<\/li>\n<li>chatlgpt[.]com<\/li>\n<li>geimini[.]com<\/li>\n<li>notebookklm[.]com<\/li>\n<li>griok[.]com<\/li>\n<li>preplexity[.]ai<\/li>\n<li>deepceek[.]com<\/li>\n<li>elevenlebs[.]io<\/li>\n<li>copiot[.]com<\/li>\n<li>midj0urney[.]org<\/li>\n<\/ul>\n<p>An analysis of registration records shows that some of these domains, like cloude[.]ai and cluade[.]ai, were registered as early as July 13, 2023.<\/p>\n<p>The use of parked domains for malware delivery is not new. In December 2025, Infoblox <a href=\"https:\/\/thehackernews.com\/2026\/01\/researchers-uncover-service-providers.html#parked-domains-as-a-conduit-for-scams-and-malware\" target=\"_blank\">highlighted how domains without a current web page can be monetized to redirect visitors to sites that serve scams and malware after profiling the host and the device they are visiting from.<\/p>\n<p>\u00abWhen a domain owner opts into <a href=\"https:\/\/www.trillion.com\/why-use-trellians-domain-redirect-traffic\" target=\"_blank\">direct search<\/a>, traffic to the domain is sold to advertisers who bid on keywords and traffic characteristics,\u00bb the DNS threat intelligence firm noted at the time. \u00abIn practice, the site visitor is usually funneled through a series of traffic distribution systems (TDSs) operated by third-party advertising platforms, creating a complex web where a legitimate business model is weaponized for abuse.\u00bb<\/p>\n<div class=\"separator\" style=\"clear: both;\"><a href=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEhU0ToobqPXsJJR4wwPeg6Q729UZAbyQILs1AXUZVdaFf6w5TuHHH36RM_241jyrocQUdWXF4eMzNRoKNQ4prDlzqslYg8I1uvAhoRDO1awhHrKNt94Gqx-Q98mXQYIFzHjrqmU9LvzG0uKv52cXnIlIzGhw_wlczSmq7xar08OJUztPADD87rVlmrdBWNg\/s1700-nu-rw-lo-l85-e365\/claude.png\" style=\"display: block;  text-align: center; clear: left; float: left;\"><img decoding=\"async\" src=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEhU0ToobqPXsJJR4wwPeg6Q729UZAbyQILs1AXUZVdaFf6w5TuHHH36RM_241jyrocQUdWXF4eMzNRoKNQ4prDlzqslYg8I1uvAhoRDO1awhHrKNt94Gqx-Q98mXQYIFzHjrqmU9LvzG0uKv52cXnIlIzGhw_wlczSmq7xar08OJUztPADD87rVlmrdBWNg\/s1700-nu-rw-lo-l85-e365\/claude.png\" alt=\"\" border=\"0\" data-original-height=\"860\" data-original-width=\"1200\"\/><\/a><\/div>\n<p>In the case of the ClickFix route, the parked page initiates a redirect chain that fingerprints the web browser and collects the public IP address before displaying the fake Cloudflare verification page.<\/p>\n<p>Island said the fingerprint gate script spans a broader set of 211 entry domains, including lookalikes of banks, insurers, and enterprise software, such as Scotiabank, Charles Schwab, Blue Cross Blue Shield, Verizon, ServiceNow, and Microsoft Azure.<\/p>\n<div class=\"separator\" style=\"clear: both;\"><a href=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEhwwUsZ94outASf3aygpe9_WwtKqwvQoRrdhhSNn8H1h1XWUBdI-B6ZXGuv2wc0xfYR07x6gG1NAIJ62zWdJIZmsnD4TLuroKIxEJpq00sSapLdOxC6vyMklGBHtVy3hm3eV-LtM97EZKQT-VZqMa2F10CUUmyChvfg6wKwncaczNRoE0fJ7tl1c3w37uEd\/s1700-nu-rw-lo-l85-e365\/typo.png\" style=\"display: block;  text-align: center; clear: left; float: left;\"><img decoding=\"async\" src=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEhwwUsZ94outASf3aygpe9_WwtKqwvQoRrdhhSNn8H1h1XWUBdI-B6ZXGuv2wc0xfYR07x6gG1NAIJ62zWdJIZmsnD4TLuroKIxEJpq00sSapLdOxC6vyMklGBHtVy3hm3eV-LtM97EZKQT-VZqMa2F10CUUmyChvfg6wKwncaczNRoE0fJ7tl1c3w37uEd\/s1700-nu-rw-lo-l85-e365\/typo.png\" alt=\"\" border=\"0\" data-original-height=\"1080\" data-original-width=\"1200\"\/><\/a><\/div>\n<p>These domains serve three types of lures &#8211;<\/p>\n<ul>\n<li>Fake verification pages on Windows that are designed to run a clipboard command<\/li>\n<li>Terminal or security updates on macOS that are designed to run a shell command<\/li>\n<li>Archive download pages that instruct users to extract and run an executable<\/li>\n<\/ul>\n<p>Separately, eight typosquat domains for Claude, DeepSeek, Copilot, ElevenLabs, and Voice AI lead to fake \u00abSecurity Check\u00bb pages that ultimately deliver Net Guard.<\/p>\n<p>While the app purports to be a Wi-Fi and DNS safety scanner and matches the MSIX hash for a <a href=\"https:\/\/apps.microsoft.com\/detail\/9mx3ch3bq44q?hl=en-GB&amp;gl=IN\" target=\"_blank\">legitimate app of the same name<\/a>, it contains capabilities to run attacker-controlled JavaScript, change the default search engine while the user is idle, edit browser profiles, and install arbitrary Chrome extensions.<\/p>\n<div class=\"dog_two clear\">\n<div class=\"cf\"><a href=\"https:\/\/thehackernews.uk\/network-defense-dd\" rel=\"nofollow noopener sponsored\" target=\"_blank\"><img loading=\"lazy\" decoding=\"async\" class=\"lazyload\" alt=\"Cybersecurity\" src=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEiWypk5aSrjVVXdRpyJaxKDe9VERLYId6cVdoZUwHGSe-EMh90qROsc-jk3uEKqB8-L4eSpBaka7err1zF86IrsEA4S2IZ8yyEsoZTsiGq2YvGuaCtdFvE8-ej7uEBhLbYJNENjs9umU6qmZCJ1aAzvG-ZDO0NtTVddy5hIGv4FBpDJp8UeOxYEzF5AeuK1\/s728-nu-rw-lo-l85-e36\/core-d.png\" width=\"729\" height=\"91\"\/><\/a><\/div>\n<\/div>\n<p>\u00abThe download from the &#8216;Security Check&#8217; pages is the Microsoft Store app itself, unmodified,\u00bb Oleg Zaytsev, Lead Security Researcher at Island, told The Hacker News. \u00abIt is byte-for-byte identical to Net Guard as Microsoft distributes it, and it carries Microsoft\u2019s own Store signature.\u00bb<\/p>\n<p>\u00abThe hidden browser control comes with every copy, whether installed from the Store or from a typo site, and it switches itself on without asking. It waits until the user stops using the computer, then takes over Chrome&#8217;s search settings and can run scripts inside the browser, following instructions from the operator&#8217;s server.\u00bb<\/p>\n<p>The third route revolves around a lookalike domain for Perplexity (\u00abpreplexity[.]ai\u00bb), which redirects the browser to a browser extension called Quick Search that&#8217;s available on the Chrome Web Store.<\/p>\n<p>\u00abThe analyzed extension needs no executable JavaScript or declared permissions to perform its main action,\u00bb Island said. \u00abIts manifest overrides the default search provider with find.flashysearches[.]com . Searches made through that provider are sent to a third party. In a workplace, those queries can include internal hostnames, customer names and project details.\u00bb<\/p>\n<p>Quick Search is part of a larger set of 16 extensions, including GPT for Chrome, which has 80,000 users. In all, the extensions collectively have 972,000 users as of November 3, 2026.<\/p>\n<p>\u00abAn address one letter away from an AI tool can lead to a very different request,\u00bb Island said. \u00abAs these services become part of everyday work, reaching the right one should be a managed path, not a test of typing accuracy.\u00bb<\/p>\n<p><i>(The story was updated after publication to include a response from Island.)<\/i><\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Cybersecurity researchers have found that lookalike domains masquerading as artificial intelligence (AI) tools are being used to serve ClickFix-style lures, browser-hijacking malware, and a set of extensions that hijack user&hellip;<\/p>\n","protected":false},"author":1,"featured_media":4162,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[265,225,983,150,4145,1022,42,382,861,826],"class_list":["post-4161","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized","tag-browser","tag-clickfix","tag-domains","tag-fake","tag-hijackers","tag-lures","tag-malware","tag-redirect","tag-search","tag-users"],"_links":{"self":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/posts\/4161","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=4161"}],"version-history":[{"count":0,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/posts\/4161\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/media\/4162"}],"wp:attachment":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=4161"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=4161"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=4161"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}