<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">I suspect that might be triggered by:<div class=""><br class=""></div><div class=""><a href="https://info.farsightsecurity.com/farsight-idn-research-report?utm_source=newsletter&utm_medium=email&utm_campaign=newsletter_axioscodebook&stream=technology" class="">https://info.farsightsecurity.com/farsight-idn-research-report?utm_source=newsletter&utm_medium=email&utm_campaign=newsletter_axioscodebook&stream=technology</a></div><div class=""><br class=""></div><div class=""> From the executive summary:</div><div class=""><br class=""></div><div class="">
<div class="page" title="Page 3">
<div class="section">
<div class="layoutArea">
<div class="column"><p class=""><span style="font-size: 10.000000pt; font-family: 'HelveticaNeue'; font-weight: 700; color: rgb(42.700000%, 38.400000%, 47.500000%)" class="">Among the key findings:
</span></p><p class=""><span style="font-size: 10.000000pt; font-family: 'HelveticaNeue'; color: rgb(42.700000%, 38.400000%, 47.500000%)" class="">100M total IDN resolutions observed; 27M unique fully qualified domain names (FQDNs)</span></p><p class=""><span style="font-size: 10.000000pt; font-family: 'HelveticaNeue'; color: rgb(42.700000%, 38.400000%, 47.500000%)" class="">8,000 IDN homographs representing or containing a top global brand name
</span></p><p class=""><span style="font-size: 10.000000pt; font-family: 'HelveticaNeue'; color: rgb(42.700000%, 38.400000%, 47.500000%)" class="">Unicode “confusables” make up a significant percentage of the characters found in IDNs; 91% of all
</span><span style="font-size: 10.000000pt; font-family: 'HelveticaNeue'; color: rgb(42.700000%, 38.400000%, 47.500000%)" class="">characters observed in IDN homographs are considered “confusable” -- a “confusable” is a Unicode
code point that is often easily confused with other characters, ligatures, and/or digraphs.
</span></p><p class=""><span style="font-size: 10.000000pt; font-family: 'HelveticaNeue'; color: rgb(42.700000%, 38.400000%, 47.500000%)" class="">Brands in banking and other related sectors are frequently imitated using IDN homographs with ~750
</span><span style="font-size: 10.000000pt; font-family: 'HelveticaNeue'; color: rgb(42.700000%, 38.400000%, 47.500000%)" class="">unique FQDNs observed per month
</span></p><p class=""><span style="font-size: 10.000000pt; font-family: 'HelveticaNeue'; color: rgb(42.700000%, 38.400000%, 47.500000%)" class="">91% of IDN homographs offered some sort of webpage
</span></p><p class=""><span style="font-size: 10.000000pt; font-family: 'HelveticaNeue'; color: rgb(42.700000%, 38.400000%, 47.500000%)" class="">We found clear violations of the ICANN Guidelines for the Implementation of Internationalized Domain
Names
</span></p><p class=""><span style="font-size: 10.000000pt; font-family: 'HelveticaNeue'; color: rgb(42.700000%, 38.400000%, 47.500000%)" class="">66% of all IDN homograph IP addresses were found to be geolocated in the United States </span></p><p class=""><span style="font-size: 10.000000pt; font-family: 'HelveticaNeue'; color: rgb(42.700000%, 38.400000%, 47.500000%)" class="">93% of IDN homograph FQDNs had IPv4-based address records </span></p></div></div></div></div></div><div class=""><br class=""></div><div class="">Regards,</div><div class="">-drc<br class=""><div><br class=""><blockquote type="cite" class=""><div class="">On Jun 27, 2018, at 10:27 AM, Andrew Sullivan <<a href="mailto:ajs@anvilwalrusden.com" class="">ajs@anvilwalrusden.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><span style="caret-color: rgb(0, 0, 0); font-family: Menlo-Regular; font-size: 10px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">I see, via Slashdot, that the BBC is once again promoting this problem:</span><br style="caret-color: rgb(0, 0, 0); font-family: Menlo-Regular; font-size: 10px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><br style="caret-color: rgb(0, 0, 0); font-family: Menlo-Regular; font-size: 10px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><a href="https://it.slashdot.org/story/18/06/26/2031212/scammers-abuse-multilingual-domain-names" style="font-family: Menlo-Regular; font-size: 10px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class="">https://it.slashdot.org/story/18/06/26/2031212/scammers-abuse-multilingual-domain-names</a><br style="caret-color: rgb(0, 0, 0); font-family: Menlo-Regular; font-size: 10px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><br style="caret-color: rgb(0, 0, 0); font-family: Menlo-Regular; font-size: 10px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><span style="caret-color: rgb(0, 0, 0); font-family: Menlo-Regular; font-size: 10px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">A</span><br style="caret-color: rgb(0, 0, 0); font-family: Menlo-Regular; font-size: 10px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><span style="caret-color: rgb(0, 0, 0); font-family: Menlo-Regular; font-size: 10px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">--<span class="Apple-converted-space"> </span></span><br style="caret-color: rgb(0, 0, 0); font-family: Menlo-Regular; font-size: 10px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><span style="caret-color: rgb(0, 0, 0); font-family: Menlo-Regular; font-size: 10px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">Andrew Sullivan</span><br style="caret-color: rgb(0, 0, 0); font-family: Menlo-Regular; font-size: 10px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><a href="mailto:ajs@anvilwalrusden.com" style="font-family: Menlo-Regular; font-size: 10px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class="">ajs@anvilwalrusden.com</a><br style="caret-color: rgb(0, 0, 0); font-family: Menlo-Regular; font-size: 10px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><style class="">ul[class*='mb-extra__public-links'], ul[class*='mb-note__public-links'], ul[class*='mb-task__public-links'] { display: none !important; }</style></div></blockquote></div><br class=""></div></body></html>