Check text for spoofed look-alike letters
Is that 'amazon' link really amazon? Cyrillic а and Greek ο render identically to Latin letters. Scan for them before clicking.
Tools used in this guide
The job
Homograph attacks paste look-alike characters into domains and filenames: аmazon.com with a Cyrillic а resolves to a different site than the one you see. Your eyes cannot tell the difference; a code-point check can.
Scan it
Paste the suspicious domain, handle, or short text and run. The report lists each look-alike with its position, code point, script, and the ASCII letter it imitates — plus a mixed-script flag when Latin and Cyrillic/Greek letters share one word.
Worked example
Scanning 'pаypal.com' (the а is Cyrillic U+0430) reports: position 2, 'а' U+0430, script cyrillic, looks like 'a' — plus the mixed-script warning, because 'pypal' around it is Latin.
- Clean text shows 'no look-alike characters found'.
- Hits include the position so you can retype that character properly.
Limits
The curated table covers common spoofing glyphs — Cyrillic, Greek, Armenian, Cherokee, fullwidth, math alphanumeric. It is not the full Unicode confusables list, so zero hits is not proof of safety. For domains, the punycode converter shows the encoded form a browser actually resolves.