🕵️ Homoglyph / Lookalike Character Detector
Find the deceptive lookalike (homoglyph) characters in text — a Cyrillic “а” or Greek “ο” hiding among Latin letters — the classic trick behind spoofed domains and brand impersonation.
⚠ 2 lookalike characters found
Mixed scripts detected — Latin letters mixed with Cyrillic/Greek. This is a classic spoofing/phishing signature.
| Character | Codepoint | Script | Looks like |
|---|---|---|---|
| р | U+0440 | Cyrillic | p |
| а | U+0430 | Cyrillic | a |
Homoglyphs are non-Latin characters that look identical to ASCII (Cyrillic а, Greek ο, fullwidth Ａ) — used to spoof domains and brand names. 🔒 Checked entirely in your browser.
How the homoglyph / lookalike character detector works
The tool checks each character against a curated set of Unicode confusables — characters from other scripts that are visually identical to ASCII letters. It reports every lookalike with its code point, script and the ASCII letter it imitates, warns when a single piece of text mixes scripts (a strong spoofing signal), and offers an ASCII-normalised version.
A live, marketable security angle: homoglyph attacks register domains like “pаypal.com” (with a Cyrillic а) that are indistinguishable to the eye. An LLM will happily read the spoofed text as legitimate; a deterministic script catches the substitution.
Frequently asked questions
What is a homoglyph?
A character from one script that looks identical to a character in another — for example Cyrillic “а” (U+0430) versus Latin “a” (U+0061). They render the same but are different code points, which is what makes them useful for deception.
How are homoglyphs used in attacks?
To spoof domains, email addresses and brand names — “аpple.com” with a Cyrillic first letter looks real but points elsewhere. This is called an IDN homograph attack.
What does “mixed scripts” mean?
That a single word or text contains letters from more than one writing system (say Latin + Cyrillic). Legitimate text rarely does this within a word, so it is a red flag the tool highlights.
What does the normalized output do?
It replaces each detected lookalike with the ASCII letter it imitates, so you can see the “real” intended string.
Is my text uploaded?
No — the check runs entirely in your browser.