Look-Alike Domains and Visual Confusion
Summary: Security researcher Alex Holden registered a look-alike of CA Technologies' ca.com using Cyrillic characters that render as the Latin letters, and obtained a valid Comodo SSL certificate for it. Chrome, Safari, Internet Explorer and Edge display the domain as its punycode equivalent (xn--80a7a.com) as a warning, while Firefox shows it as the real ca.com with no notice.
What's compelling: Firefox, which by most accounts is the third most-popular browser, renders look-alike IDNs without warning, and the same default applies to the Tor Browser - a population the article notes often holds significant assets in virtual currencies.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026