Lookalike domain and punycode checker

Paste a domain, link or email address. It shows the real address behind international letters (punycode), finds letters from other alphabets that imitate Latin ones, and flags names that copy a known brand.

Nothing you type leaves this page

How it works

Domain names can use letters from any alphabet. The Cyrillic “а” looks exactly like the Latin “a”, so аpple.com (with a Cyrillic а) is a different website from apple.com. Behind the scenes such names are stored as punycode, starting with xn--, and that's what this tool shows you.

It also reads the name the way a person would, by mapping look-alike letters back to Latin, and checks whether the result imitates a known brand. The lookalike list does the reverse: it lists typos and character swaps of your own domain, so you can check which ones someone has registered.

Questions people ask

What is punycode?

Punycode is the way international domain names are written in plain ASCII. For example, münchen.de becomes xn--mnchen-3ya.de. Browsers usually show the readable form, which is why attackers can abuse it.

What is a homograph attack?

A fake domain built from letters that look identical to the real ones, often from the Cyrillic or Greek alphabet, so the address bar seems to show the real site.

What is typosquatting?

Registering misspellings of a popular domain, such as gooogle.com or paypa1.com, to catch people who mistype it or don't look closely.

More free tools

Found a bug or want another tool? Contact