Skip to content

Punycode / IDN Converter

Convert an internationalised domain to its xn-- form and back — the check that reveals a look-alike phishing domain.

Input

Output

What xn-- actually hides

DNS only carries ASCII, so an internationalised domain is transported in its Punycode form: 한국.kr travels as xn--3e0b707e.kr. Browsers display the readable version, which is convenient — and exactly what a homograph attack exploits.

аррӏе.com, written in Cyrillic, looks like apple.com but is xn--80ak6aa92e.com. Converting a suspicious link here shows what the browser is really resolving.

Frequently asked questions

Why does my domain come back unchanged?

It is already ASCII, so there is nothing to encode. Punycode only applies to labels containing non-ASCII characters.

Can I use this to check a suspicious link?

It reveals the true hostname, which is where deceptive domains hide. It does not check reputation or follow redirects.

Related tools