5 ms·

Some time ago I registered http://www.goolge.io/ http://www.goolge.io/. Still haven't done anything with it, I guess at some point I'll just redirect it to duck

Some time ago I registered http://www.goolge.io/ http://www.goolge.io/. Still haven't done anything with it, I guess at some point I'll just redirect it to duckduckgo. [EDIT: now it's redirected to duckduckgo.] This can of course be used in a malicious way. I thought about rebuilding the homepage of the bank Credit Suisse on www.credit-siusse.ch, but that's probably illegal.

75j 10y ago
I registered http://www.4ppl3.com http://www.4ppl3.com a while back. No potential for abuse really, but I just thought it was fun to have a l33t-speak version of the domain name of one of the world's most litigious companies. That said, I haven't done anything with it, and I'm not a domain squatter, so if anyone wants it I can hook you up!
- drzaiusapelord 10y ago
  l33t-speak is so far off my radar that I was wondering if there was some hot startup called '4 people 3' or somesuch. I doubt anyone at Apple remotely cares about l33t-speak from a branding perspective.
  - erelde 10y ago
    To be fair, I don't think I know anyone who "cares" about l33t speak. H4xx0r j0k3s is all it is. I never seen anyone go out of their way to defend or use leet speak all day long.
    - Symbiote 10y ago
      In some countries, it's the best that can be done for vanity car registration plates. e.g. a site selling them in the UK is promoting "JO66 ERX", which is probably supposed to be read as "Jogger X". Current bid £750, for some reason.
pbhjpbhj 10y ago
That looks a lot like the sort of trademark use that authorities have deemed infringing, I'd expect the registrar to "recover" that unless you've got a clear explanation (like Goolge is your name, even then ... (remember Nissan, Mike Rowe, etc.)).
ergot 10y ago
Most browsers should forcibly transcribe this to Punycode[1]: https://www.𝙿𝙰𝚈𝙿𝙰𝙻.com/ And yet when I paste this into the latest Firefox it redirects to https://www.paypal.com/ https://www.paypal.com/ No 301 redirects or anything, the browser just treats it like ASCII, which it is clearly not, it actually happens to be Fullwidth: https://en.wikipedia.org/wiki/Fullwidth_form https://en.wikipedia.org/wiki/Fullwidth_form Serious phishing opportunity if you ask me! [1] https://en.wikipedia.org/wiki/Punycode https://en.wikipedia.org/wiki/Punycode
- bazzargh 10y ago
  Nope. The browser is behaving sensibly, since you can't register that domain. It's applying the same rules that the registrars do. ICANN require that registries follow RFC3491 and related RFCs for name prep before allowing a name to be registered https://www.icann.org/resources/unthemed-pages/idn-guidelines-2005-11-14-en https://www.icann.org/resources/unthemed-pages/idn-guideline... . What that one does is (among other things) NFKC normalization and case-folding: irb(main):016:0> "\ufeff\uff30\uff21\uff39\uff30\uff21\uff2c" => "ＰＡＹＰＡＬ" irb(main):017:0> "\ufeff\uff30\uff21\uff39\uff30\uff21\uff2c".unicode_normalize(:nfkc).downcase => "paypal"
  - ergot 10y ago
    So if I mix ASCII with obscure UTF8 characters like the domain in OP's post I can register it then? Something like www.ｐａｙpal.com --> www.n--pal-n76secrc.com
    - bazzargh 10y ago
      No. When you apply NFKC normalization to that string, you get just 'paypal', so Paypal have already registered the result. You can try that here: http://mct.verisign-grs.com/ http://mct.verisign-grs.com/ - notice how the output is not the same as some online converters based on punycode.js, because that doesn't have nameprep support https://github.com/bestiejs/punycode.js/issues/40 https://github.com/bestiejs/punycode.js/issues/40
  - 10y ago

75j 10y ago

I registered http://www.4ppl3.com http://www.4ppl3.com a while back. No potential for abuse really, but I just thought it was fun to have a l33t-speak version of the domain name of one of the world's most litigious companies. That said, I haven't done anything with it, and I'm not a domain squatter, so if anyone wants it I can hook you up!

drzaiusapelord 10y ago
l33t-speak is so far off my radar that I was wondering if there was some hot startup called '4 people 3' or somesuch. I doubt anyone at Apple remotely cares about l33t-speak from a branding perspective.
- erelde 10y ago
  To be fair, I don't think I know anyone who "cares" about l33t speak. H4xx0r j0k3s is all it is. I never seen anyone go out of their way to defend or use leet speak all day long.
  - Symbiote 10y ago
    In some countries, it's the best that can be done for vanity car registration plates. e.g. a site selling them in the UK is promoting "JO66 ERX", which is probably supposed to be read as "Jogger X". Current bid £750, for some reason.

pbhjpbhj 10y ago

That looks a lot like the sort of trademark use that authorities have deemed infringing, I'd expect the registrar to "recover" that unless you've got a clear explanation (like Goolge is your name, even then ... (remember Nissan, Mike Rowe, etc.)).

ergot 10y ago

Most browsers should forcibly transcribe this to Punycode[1]: https://www.𝙿𝙰𝚈𝙿𝙰𝙻.com/ And yet when I paste this into the latest Firefox it redirects to https://www.paypal.com/ https://www.paypal.com/ No 301 redirects or anything, the browser just treats it like ASCII, which it is clearly not, it actually happens to be Fullwidth: https://en.wikipedia.org/wiki/Fullwidth_form https://en.wikipedia.org/wiki/Fullwidth_form Serious phishing opportunity if you ask me! [1] https://en.wikipedia.org/wiki/Punycode https://en.wikipedia.org/wiki/Punycode

bazzargh 10y ago
Nope. The browser is behaving sensibly, since you can't register that domain. It's applying the same rules that the registrars do. ICANN require that registries follow RFC3491 and related RFCs for name prep before allowing a name to be registered https://www.icann.org/resources/unthemed-pages/idn-guidelines-2005-11-14-en https://www.icann.org/resources/unthemed-pages/idn-guideline... . What that one does is (among other things) NFKC normalization and case-folding: irb(main):016:0> "\ufeff\uff30\uff21\uff39\uff30\uff21\uff2c" => "ＰＡＹＰＡＬ" irb(main):017:0> "\ufeff\uff30\uff21\uff39\uff30\uff21\uff2c".unicode_normalize(:nfkc).downcase => "paypal"
- ergot 10y ago
  So if I mix ASCII with obscure UTF8 characters like the domain in OP's post I can register it then? Something like www.ｐａｙpal.com --> www.n--pal-n76secrc.com
  - bazzargh 10y ago
    No. When you apply NFKC normalization to that string, you get just 'paypal', so Paypal have already registered the result. You can try that here: http://mct.verisign-grs.com/ http://mct.verisign-grs.com/ - notice how the output is not the same as some online converters based on punycode.js, because that doesn't have nameprep support https://github.com/bestiejs/punycode.js/issues/40 https://github.com/bestiejs/punycode.js/issues/40
- 10y ago