1 Billion dollars a year is a good estimate.
Edit: What’s really going to bake your noodle though, is that given all the issues with various kinds of URL squatting, they’re actually safer than those of us typing in the URL directly. Let’s hear it for my Dad, cybersecurity thought leader.
I heard there's something called a "bookmark" which makes it so you don't have to type in the URL though.
But that's arcane magic.
That is, unless, the site you're on is Technically Fucking Braindead and decides to intercept keystrokes. Fuck those sites though. There's an about:config to disable that behavior but a some certain sites stop working entirely without it. Google Documents... I'm looking at you...
https://threatresearch.ext.hp.com/adverts-mimicking-popular-...