Homograph Attack

How it was found

Hello HackerOne,

Fix of Report #29491 and #58612 is incomplete. I found another way to to replicate homograph attack using Hex Code:

www.%00ebаy.com www.%01ebаy.com www.%02ebаy.com www.%03ebаy.com www.%04ebаy.com www.%05ebаy.com www.%06ebаy.com www.%07ebаy.com www.%08ebаy.com www.%0Bebаy.com www.%0Cebаy.com www.%0Eebаy.com www.%0Febаy.com www.%10ebаy.com www.%1Aebаy.com www.%1Bebаy.com www.%1Cebаy.com www.%1Debаy.com www.%1Eebаy.com www.%1Febаy.com

Internationalized Domain Name or IDN are displayed in Unicode and there is no encoding into Punycode on external link warning page

Thanks, @atom