Learn to spot Internationalized Domain Name (IDN) spoofing
Homograph attacks (also called Homoglyph attacks) exploit visually similar characters from different scripts (like Latin vs. Cyrillic or Greek) to create deceptive domain names.
Attackers register domains using Punycode (prefixed with xn--). To the computer, xn--80ak6aa92e.com is a unique address, but to your browser, it renders as apple.com.
| Visual Spoof | Legitimate | Technique |
|---|---|---|
| micrоsоft.com | microsoft.com | Cyrillic 'о' |
| paypaӏ.com | paypal.com | Cyrillic 'ӏ' (palochka) |
| tωitter.com | twitter.com | Greek 'ω' |
Visual inspection is unreliable (as you will see in the training). Use these technical methods instead:
xn--..., it is a homograph attack.
Paste a suspicious domain below to reveal hidden characters.
Look closely at the characters.
Actual Domain: