What Is Punycode and Why Is It Used?
Punycode is a standard way to represent international characters in domain names using the ASCII characters supported by the Domain Name System.
Why Punycode exists
People around the world use writing systems that include characters beyond a–z. Internationalized domain names make those languages usable in web addresses. Their ASCII form commonly begins with xn--.
Why it deserves attention
Some Unicode characters from different alphabets look similar to ordinary Latin letters. That visual similarity can be abused to create a hostname that resembles a trusted brand even though it is technically different.
Punycode is not inherently malicious
Many legitimate websites use internationalized domains. Seeing xn-- is a caution signal, not proof of phishing. A local checker cannot establish ownership or reputation solely from the text of the URL.
What to do
If the link is unexpected or requests a password, payment, or account action, use the organization's known app or manually typed official address. Compare the ASCII hostname carefully before proceeding.
Check a suspicious link
Paste the URL into the local Link Checker to inspect its structure without visiting the website.
Check a Link