Follow

how do companies that offer notifications about new homograph domains work? i at first thought it's easy, but then read about how zero-width characters are also supported, and now can't think of anything that'd work reliably. could monitor certificate transparency logs, but that only works if scammers get a tls certificate (though it's likely).

@leip4Ier they oftentimes use a service like DomainTools to monitor newly registered domains.

Sign in to participate in the conversation
Infosec Exchange

A Mastodon instance for info/cyber security-minded people.