Check text for spoofed look-alike letters

Is that 'amazon' link really amazon? Cyrillic а and Greek ο render identically to Latin letters. Scan for them before clicking.

Tools used in this guide

The job

Homograph attacks paste look-alike characters into domains and filenames: аmazon.com with a Cyrillic а resolves to a different site than the one you see. Your eyes cannot tell the difference; a code-point check can.

Scan it

Paste the suspicious domain, handle, or short text and run. The report lists each look-alike with its position, code point, script, and the ASCII letter it imitates — plus a mixed-script flag when Latin and Cyrillic/Greek letters share one word.

Worked example

Scanning 'pаypal.com' (the а is Cyrillic U+0430) reports: position 2, 'а' U+0430, script cyrillic, looks like 'a' — plus the mixed-script warning, because 'pypal' around it is Latin.

  • Clean text shows 'no look-alike characters found'.
  • Hits include the position so you can retype that character properly.

Limits

The curated table covers common spoofing glyphs — Cyrillic, Greek, Armenian, Cherokee, fullwidth, math alphanumeric. It is not the full Unicode confusables list, so zero hits is not proof of safety. For domains, the punycode converter shows the encoded form a browser actually resolves.