Free Punycode / IDN Converter

Convert Unicode domains to xn-- punycode and back · and check whether a domain mixes scripts the way phishing lookalikes do.

Frequently asked

What is a homograph attack?

Registering a domain with characters that render like another's · Cyrillic а in "pаypal.com" is a different letter than Latin a. In punycode the fake shows as xn--pypal-4ve.com · which is why converting suspicious domains is a quick phishing check.

What does xn-- mean in a domain?

It marks a punycode-encoded label: Unicode squeezed into the ASCII that DNS requires. Legitimate international domains use it (münchen.de → xn--mnchen-3ya.de) · it's the mixed-script lookalikes that are suspect.

Related tools

  • robots.txt Tester · Paste your robots.txt and test any URL against it · per user-agent, including AI crawlers · using the same longest-match rules Google applies.
  • User-Agent Parser · Paste a User-Agent string · from logs or analytics · and identify the browser, OS, device class, and whether it's a known bot or AI crawler.
  • Secret Scanner · Paste any code, config, or bundle excerpt and get flagged secrets · AWS keys, Stripe live keys, OpenAI keys, GitHub tokens, JWTs, private key blocks and more.

Run a full security scan →