URL Brand Impersonation Checker
Flag lookalike domains imitating known brands: Levenshtein distance, homoglyph normalization, punycode decoding, and risky-TLD scoring. Heuristic and fully offline.
Loading tool...
What is URL Brand Impersonation Checker?
The URL Brand Impersonation Checker flags domains that imitate famous brands: Levenshtein distance against a bundled list of 24 impersonated brands, homoglyph normalization, RFC 3492 punycode decoding of IDN labels, and risky-TLD scoring - all computed locally, with severity-coded findings and the URL never fetched.
Key Benefits
- Catch paypa1.com-style spoofs before anyone clicks
- Punycode decoding exposes IDN homographs the address bar hides
- Severity-coded findings separate definite spoofs from borderline cases
- Fully offline - even the check reveals nothing to attackers
- Works on any device for security awareness training
Common Use Cases
- •Vetting links in suspicious emails before reporting them
- •Auditing referral and ad traffic for brand-spoofing domains
- •Training staff to recognize typosquatting and homograph tricks
- •Quickly checking a customer-reported domain during triage
How to Check a Suspicious URL
- Paste the URL: Enter the suspicious link or bare domain - nothing is fetched or visited.
- Read the findings: Review severity-coded findings: brand distance, homoglyphs, punycode decoding, and risky TLDs.
- Act on high severity: Treat high-severity domains as unsafe: do not click, and report them to your security team.
Key Features
- Levenshtein distance scoring against 24 frequently impersonated brands
- Homoglyph normalization: 0 for o, 1 for l, Cyrillic for Latin
- RFC 3492 punycode decoding of IDN labels back to Unicode
- Risky-TLD scoring for phishing-heavy extensions
- Severity-coded findings: high, medium, and clean
- Fully offline and heuristic - the URL is never fetched