Typosquats of Mastodon Servers

Published on:

February 13, 2023

Likely adserving typosquats

We’re seeing more typosquats targeting popular Mastodon servers lately. Most look like simple adserving typosquats for now, but some of these are protected by Cloudflare, which raises our suspicions about upcoming malicious activity.

Ex:
matodon[.]online
mastoon[.]online

Related Content

SecuritySnacks

DPRK Contagious Interview: Developer Workflow Compromise

Analyze the DPRK "Contagious Interview" campaign targeting developers. Get technical deep-dives into VS Code task abuse, Node.js malware obfuscation, and a full Sigma/EDR detection pack to defend your CI/CD pipeline and identity perimeter.

Learn More

SecuritySnacks

The AI Frame Campaign Continues

Analysis of the persistent AIFrame campaign: A fake Google Authenticator Chrome extension and 6+ related apps use "deploy clean, update dirty" tactics to steal 2FA credentials and inject malicious iframes. Learn how this operation bypasses Google’s security reviews.

Learn More

SecuritySnacks

Cybersecurity Reading List - Week of 2026-04-06

From Gramsci's 'morbid symptoms' to modern threat intelligence - a cybersecurity roundup exploring why defenders should treat root causes over chasing dramatic threats, with curated links on ransomware, HUMINT, disinformation, and more.

Learn More

Typosquats of Mastodon Servers

Likely adserving typosquats

Heading