Post #2277004
2026-05-02 06:12 UTC
If the domain starts with xn- it’s a telltale sign, that it’s a punycode domain name. Read: it does contain characters that are not ASCII characters. This is done as domains need to be ASCII only. The format of these domains is usually xn–allASCIIcharacters-allNonASCIIcharactersEncoded.tld. Example: täst.com is xn–tst-qla.com.
If you manually type such a domain (containing characters like äöüéèçč…), many browsers will still display what you entered, but convert the domain into punycode in the background before connecting.
You can decode the domain of this post and it results in マリウス.com.
Replies (2)
-
@YoFrodo@lemmy.world 2026-05-02 06:15
Thats interesting! And my translation addon says it translates to “Marius”
-
@MonkderVierte@lemmy.zip 2026-05-02 07:53
This is done as domains need to be ASCII only They don’t need to, but a punycode-attack is done by using a letter of another language that looks almost identical. I think you still have to actively enable the defense against it (some about:config setting), the poster did.