Question 1

What is typosquatting?

Accepted Answer

Typosquatting is the practice of registering domain names that are slight misspellings or visual variations of legitimate popular domains. For example, 'amaz0n.com' or 'paypa1.com'. Attackers use these to host phishing pages, redirect users, or intercept credentials from users who mistype URLs.

Question 2

What are homoglyph attacks?

Accepted Answer

Homoglyph attacks replace Latin characters with visually identical Unicode characters from other scripts. For example, using the Cyrillic 'а' (looks identical to Latin 'a') in a domain name. IDN (Internationalized Domain Names) make this possible. Browsers display the punycode form (xn--) to mitigate this risk.