3 ms·

Let's see if I can knock together "paypal" out of Cyrillic... раура The hard part is the "L," which you can sort-of fake with a 1. раура1.bg The "one-sc

by lmkg 14y ago

Let's see if I can knock together "paypal" out of Cyrillic... раура The hard part is the "L," which you can sort-of fake with a 1. раура1.bg The "one-script" idea is better than nothing, but it's far from complete. For any two European scripts, the overlap of shared characters is substantial. Some domains will have good protection, and others nothing at all. [edit] Oh, here's a better one: раур.al This one abuses the Albanian top-level domain to look like a cute shortened version. Albania has a small population of native Russian- and Bulgarian-speakers who would have legitimate cause for using a Cyrillic-script domain.

deno 14y ago
Well those are all similar looking, not looking exactly the same just with different Unicode code points. I don’t think it’s registrar’s job to protect users from all possible phishing attacks. Especially since https://secure-paypal-processing-eu3.net https://secure-paypal-processing-eu3.net would work just as well for most scamming purposes.
- Moto7451 14y ago
  Indeed, especially when hack jobs like this work: http://www.macrumors.com/2013/05/01/new-apple-id-phishing-effort-compromises-over-100-sites/ http://www.macrumors.com/2013/05/01/new-apple-id-phishing-ef...