PunyGuard de Dolan

PunyGuard warns you about lookalike domains before you click them.

Attackers register web addresses that look exactly like sites you trust by swapping Latin letters for identical-looking Cyrillic or Greek ones, or by hiding them in Punycode (xn--) form. PunyGuard checks every link, script, frame, and form on the page you are viewing and flags these impostors.

What it does
- Scans every hostname on the page, including embedded links, scripts, and iframes
- Detects homoglyphs, mixed scripts (for example Latin + Cyrillic), invisible characters, and Punycode
- Shows a red, amber, or green badge with the number of risky domains
- Explains each verdict: the Unicode form you see, the real ASCII form, and why it was flagged
- Unicode inspector: every character's U+ code point, official name, block, script, and escapes

Private by design
- All analysis runs on your device; PunyGuard makes no network requests
- No accounts, analytics, tracking, or data collection
- Open source: https://github.com/0xdolan/PunyGuard

Learn how homograph attacks work: https://github.com/0xdolan/PunyGuard/blob/main/docs/README.md