Internationalized Domain Names and Homograph Attacks

With normal spoofing a scammer tries to get personal information by sending fraudulent emails masquerading as an official website an individual might be working with. While some fall for the deception, many know better since the domain name in the email doesn’t resemble the domain name they usually use to access whatever site. However, what happens if a domain name looks exactly like an official website?

This, in combination with a more ‘professional’ email, could trick someone into giving away all of their personal data. And when this happens they will eventually become victims of identity theft. But, how can a scammer acquire a domain name that looks official? It’s through the unfortunate practice of the homograph attack.

What is a homograph attack? A homograph attack is when a person makes an internationalized domain name, (also known as an IDN), look like a traditional domain name associated with a popular website. They are able to do this because of the way internationalized domain names work. Basically, internationalized domain systems use a different type of coding system than the ASCII-based domain names Americans are used to.

However, even with a different coding system, some languages have characters that look similar to characters used in American English. Scammers exploit this by taking these letters and creating domain names that look ‘new’ to browsers and servers, at least in terms of coding. To the human eye, these fraudulent domain names appear to already be taken, which is exactly what a scammer wants. They cause further confusion by creating sites that look pretty much like the sites associated with the original domain name that the scammers are spoofing.

Before and even after internationalized domain names became popular, homograph attacks were expressed through spoofing just English characters. Scammers exploited the visual similarities between ‘O’ and ’0′ or ‘I’ and ‘l’. Examples include ‘G00Gle.com or ‘PayPaI.com.’ If a person is not paying attention, they could still become victims, but at least these types of domain names still look unusual. With internationalized domain name homograph attacks, the above-mentioned websites could look just as they are supposed to, fooling even the most vigilant Internet user.

So, how can a person prevent becoming a victim of an internationalized domain name homograph attack? First, they should never click on any domain name that is given through an email. Instead, they should enter the domain name manually into their browser. In situations where one is working with a third-level domain that could be harder to remember, Internet users need to copy and paste the domain name into Notepad. This program will help them determine what character set and coding is being used for the domain name. If it’s not English and ASCII, a person should be weary.

In conclusion, internationalized domain name homograph attacks can cause a lot of havoc for Internet users. However, Internet users should find comfort in the fact that while they do need to be aware of the presence of the homograph attack, the traditional method of spoofing which is much easier to spot tends to be more common. This is because a person must be both clever and lucky to land an internationalized domain name that looks that much like a domain name that is already in use. It’s much easier for scammers to try and fool people through email hyperlinks.

Domain Name Hacks

Traditional domain names consist of a word or phrase that describes a website followed by an extension. Extensions can be .com, .net or country-based such as .fr or .jp. So, if this is the case, how can domain names like blo.gs or del.icio.us exist? It’s because a domain name doesn’t have to follow a traditional format. When it is created in the manner demonstrated above, it is called a domain name hack. With a domain name hack, a domain name spells out a ‘word’ by using a combination of periods and less popular country-based or state-based extensions.

Now, if you think a domain name hack is a simply a trick created by spammers and/or webmasters with no life, think again. Yahoo obtained the rights to both blo.gs and del.icio.us, despite their unusual-looking format. There are also popular organizations that are actually known by domain name hacks. Examples include who.is, (a site that lets a webmaster know the specifics behind a domain name and their associated website), and whocalled.us, (a site that allows consumers to list the numbers of telemarketers). Even other countries use domain name hacks in their own languages. Consider Germany’s popular Schokola.de, (which means chocolate in English).

So, does this mean webmasters should consider using domain name hacks? The answer is it depends. It is important to remember that while domain name hacks are witty, many of them can be inconvenient for web surfers. Some may even wonder if the site is legitimate, since the most common extensions are .com, .net, .org and .biz. However, since there are domain name hacks that still receive a healthy amount of traffic, it is possible that website visitors might overlook how a domain name hack is titled if the site it is pointing to proves to be worthwhile. There is also the option of having a second more normal-looking domain name point to a domain name hack. This gives website visitors two ways of being able to access one’s website.

How can a person think of a good domain name hack? First, they need to get a list of all the extensions that are possible with a domain name. They then need to find a domain name company that sells that sells the extension they are looking for. Then they will need to think of any word or phrase that includes the letters used in the extension. But they will need to make sure these letters are at the end of the word, since extensions conclude a domain name. An exception could be made if a person considers using third-level domains. In this situation the letters of the extension could be used in the middle of the domain name hack.

If a webmaster finds they are having trouble thinking of a word or phrase that contains their selected extension, they could use a keyword analyzer to help them. Overture and Google offer keyword analyzers for free, though webmasters might find more use from paid keyword analyzers. This is because paid keyword analyzers offer more information about a keyword than free ones.

All About Mobile Domain Names

When the Internet first came out it was restricted to a wired connection to a computer. Eventually technology improved, creating wireless Internet. At that point the Internet could be accessible through desktops, laptops and mobile devices without wiring. This means that the Internet was now portable. And as more mobile devices are getting created, consumers are exploring how to increase this portability. In fact, wireless Internet has gotten so popular with mobile devices, domain name companies have created a new extension. It’s called .mobi.

.Mobi is the extension of choice for websites that are being formatted for cell phones, pdas and other mobile devices. It can be bought from most major domain name companies such as Godaddy or Network Solutions. As far as registering a .mobi domain name, one would go through the same type of procedure that is associated with traditional domain names. This involves first choosing a .mobi domain name and seeing if it is available.

If it is not available, the domain name company will offer suggestions on what a person can use. Either way, the customer will be given another chance to select another .mobi domain name. Once they get one that is not taken, they can proceed to purchase it. The contract will last one to two years, depending on what they agreed upon with the domain name company. When the contract is up, a person will have to renew their .mobi domain name if they want to continue to keep it.

So, why would a webmaster decide to invest in a domain name that is restricted to mobile devices? Well, it’s mainly because they get an opportunity to center in on a market that is relatively new. Since most webmasters or companies are trying to take advantage of the .coms or the .nets, the .mobi has become somewhat forgotten. This means that it is prime for search engine keywords that would normally not be available for traditional domain names. It can also allow a webmaster a branding opportunity for their company.

However, since a .mobi domain name means a webmaster is creating a website specially designed for a mobile phone, it cannot have the types of frills that it could have if it was being promoted on a computer. Good mobile websites need to be mostly textual with very limited number of pics, (if any). Granted, plain text is not fancy, but it doesn’t require much loading time. Mobile phone sites should also not be very large nor should they be created with frames or other more complicated layouts.

A webmaster may also want to consider trying to divert the mobile website visitor to a regular website. One way this can be done is by advertising the domain name that is associated with a traditional website. But it must be made clear that the site will only display appropriately on regular computers. Another option is trying to capture the person’s email address by offering them something free, such as an e-book or low-cost merchandise.

When they sign up to the email subscription, their first newsletter could advertise the traditional website a webmaster wants promoted. By doing either of these options, webmasters can still take advantage of pay-per-clicks or affiliate programs, revenue generators which may not be promoted on .mobi websites due to viewing limitations with banner or text ads.