PunyGuard

Local-first protection against IDN homograph attacks, lookalike domains, and phishing script spoofing.

PunyGuard warns you about lookalike domains before you click them. Attackers register web addresses that look exactly like sites you trust by swapping Latin letters for identical-looking Cyrillic or Greek ones, or by hiding them in Punycode (xn--) form. PunyGuard checks every link, script, frame, and form on the page you are viewing and flags these impostors. WHAT IT DOES • Scans every hostname on the page, including embedded links, scripts, and iframes • Detects homoglyphs, mixed scripts (for example Latin + Cyrillic), invisible characters, and Punycode • Shows a red, amber, or green badge with the number of risky domains • Explains each verdict: the Unicode form you see, the real ASCII form, and why it was flagged • Unicode inspector: every character's U+ code point, official name, block, script, and escapes PRIVATE BY DESIGN • All analysis runs on your device; PunyGuard makes no network requests • No accounts, analytics, tracking, or data collection • Open source (GPL-3.0): https://github.com/0xdolan/PunyGuard