Phishing domains
Spotting and reporting fake domains.
- Homograph attack: when an a isn't an a
A homograph attack swaps letters for lookalikes from other alphabets. How punycode (xn--) exposes them, what Chrome and Firefox show, and how to defend.
- Report a phishing site: who can take it down
Report a phishing site to Google Safe Browsing, the registrar, the host, APWG and NCSC or CISA. Who can block what, plus a report template that gets read.
- How to spot a phishing domain in ten seconds
Spot a phishing domain by reading the address right to left: the real domain sits just before the extension. Plus WHOIS age checks and the padlock myth.
- Typosquatting: lookalike domains and how to defend
Typosquatting turns typos into phishing and intercepted email. 8 common variant types, a free tool to find them, and what a defensive .com at €14.99 a year buys.