"The муѕрасе.com domain name is being auctioned on eBay. It’s a Cyrillic IDN domain name that looks exactly the same as myspace.com. Despite Internet Explorer 7 new anti-phishing feature, seller claims the domain renders fine on it and even shows a picture to prove it… "

http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&item=320039726646

well ofc it's not the real domain if you take a good look you see that the 'm' in 'муѕрасе.com' ain't a real M. I had come around lots of these urls being sold on ebay some months ago, i never knew what they would be good for, cause like in this example 'муѕрасе.com' redirects to the real domain http://xn--80aktqgj0k.com/
Well now I see that the only think this can be good for (and didn't occur to me back then) is phishing? and not that good phishing since the url after being type redirects to a weird domain name :s

Any more ideas what this can be good for? and why the hell does this work? and how does it work?

ty :)

edit:
ok your forums wont let me write the weird letter, just go her to see it: http://digg.com/tech_deals/com_being_sold_on_ebay_com

--
http://chasenet.org/home/



Edited 2 time(s). Last edit at 10/19/2006 10:05AM by nrg.

I looked into IDN issues extensively back then. They've been turned off by default... the original advisory was posted by the Schmoo group if I'm not mistaken. http://www.shmoo.com/idn/

I think this would only affect users who had it turned on (of which I know zero personally). It's just a con, and a bad one at that since you'd try to type it in and it wouldn't work. ;)

- RSnake
Gotta love it. http://ha.ckers.org