Researchers Discover New Domain Spoofing Techniques That Bypass Chrome’s Phishing Protections
Researchers showed IDN lookalike domains can evade Chrome’s Unicode display and near-match phishing warnings.
60
Organization
Have I Been Squatted
- Mentions · 7d0
- Mentions · 30d3
- All mentions3
- First seenOct 10, 2026
- Last mentioned18d ago
Timeline
3 articles · newest firstNew Unicode Characters Let Attackers Create Convincing Lookalike Domains for Phishing
Researchers showed Chromium can display Unicode brand lookalike domains as readable text, bypassing Punycode warnings.
58
Two characters open up a world of typosquatting opportunities in Chromium browsers
Researchers demonstrate Cyrillic barred-o and Latin k-hook glyphs bypass Chromium's anti-spoofing checks, letting lookalike domains like fake Apple and Okta render as genuine.
55
Appears with
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.