Observed arrival · 2026-09-28
A Cyrillic lookalike hiding in an address bar
An interactive security-research demo shows how Cyrillic characters can make a registered domain resemble a familiar Latin-script address.
- For
- Security teams and browser-safety educators
- Worth noticing
- The page says Chrome displays this registered Cyrillic domain as readable text because it passes the browser’s imitation check.
Field notes
The comparison places Latin “e” beside Cyrillic “ө” and says both are drawn using the visitor’s interface font; hovering animates the letterforms. It explains the browser’s Punycode lookup and says Chrome renders this example as readable text because it passes an imitation check. The page recommends direct navigation, bookmarks, password-manager autofill, and browser updates. A longer technical write-up is described as forthcoming, not present in the extracted page.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
One card from the complete issue