@CenturyAvocado
@briankrebs
Does seem to be quite a lot of look alike domains in the last week, so this is my best guess on your experience

https://urlscan.io/search/#domain.keyword%3A*rufus*

@briankrebs
I think it's worth noting, a long history of actors buying ad-space at the top of search engines.

The url in the ad appears legitimate (it's visually the legitimate URL), but when clicked goes to a different url. I'm not positive that's the case here, but it's been done 100s of times for 100s of other tools (AI tool installers, chrome installs, etc), and there is zero visual indication it's an ad directing to the wrong domain.

Thanks to LLMs, the landing pages have also gotten much better at copying the real pages too.

Making it more difficult, is that ads don't always present themselves, so seeing it a 2nd time may take 100s of visits

Or maybe it really was a compromised rufus domain