I meant to visit indianasheriffs.org but accidentally typed a misspelled version of the domain. That site automatically redirected me to yfdabv11.com with a long query string in the URL. I did not enter any passwords, payment details, or personal information, and I did not download or install anything, allow notifications, or approve any prompts. Could simply visiting the typo domain and being redirected have triggered malware, a drive-by download, or a browser exploit on my Windows PC? Does this look more like a parked or typosquatted domain using an advertising redirect, and is closing the page and running a normal Windows Security scan enough?
2 Answers
Based on what you described, the risk is very low. Typosquatted domains commonly use advertising or parking redirects, and a modern, updated browser usually blocks or limits suspicious downloads and scripts. Since you did not provide information, run a file, install anything, or approve prompts, there is no obvious sign of compromise. Close the tab, make sure Windows and your browser are up to date, and run a normal Defender scan if it will give you peace of mind.
A completely silent browser exploit is technically possible, but it is uncommon and generally depends on an unpatched browser or operating-system vulnerability. Random visitors to a typo domain are unlikely to be targeted that way. If your browser did not show a download, security warning, notification request, or unusual behavior, there is probably nothing further to do beyond a standard antivirus scan and checking for unfamiliar recent downloads or installed programs.
I’m going to run a deeper scan as a precaution, but I definitely did not enter anything or intentionally download a file.