$ man homoglyph-check
/homoglyph-check
PRICE / CALL
$0.003
USDC · base mainnet · scheme: exact
METHOD
POST
CLUSTER
webprobeCATEGORY
utilities
STATUS
● live
NAME
homoglyph-check — detects unicode lookalike characters that impersonate ascii latin letters, a common phishing-domain trick
SYNOPSIS
POST https://x402.agentutility.ai/homoglyph-check
Content-Type: application/json
X-PAYMENT: <signed-transferWithAuthorization>
{ ... }↳ first call →
402 Payment Required. Sign USDCtransferWithAuthorization, retry with theX-PAYMENT header.DESCRIPTION
Detects Unicode lookalike characters that impersonate ASCII Latin letters, a common phishing-domain trick. Scans text (typically a domain, email, or username) for Cyrillic / Greek / fullwidth / mathematical lookalikes plus zero-width and RTL-override / bidi-control characters. Returns per-character findings (codepoint, block, impersonates), block counts, mixed-script flag, ASCII-folded normalized form, and a 0-100 risk score with bucket. Use it as a homoglyph detector, Unicode lookalike scanner, IDN spoof check, phishing-domain inspector, typosquat detector, mixed-script analyzer, or zero-width-char finder.
INPUT — request schema
| property | type | description | req? |
|---|---|---|---|
| text | string | Input string to scan (domain, email, username, or arbitrary text). UTF-8, max ~10k chars. | required |
OUTPUT — response shape
| field | type | description |
|---|---|---|
| text | string | Original input string that was scanned for homoglyphs and invisible characters. |
| text_length | number | Character count of the input string. |
| homoglyph_findings | array | Array of detected lookalike characters with position, script (Cyrillic/Greek/etc), and ASCII equivalent. |
| homoglyph_count | number | Total number of homoglyph characters found in the input. |
| invisible_findings | array | Array of zero-width, invisible, or RTL-override characters detected, with positions and codepoints. |
| invisible_count | number | Total number of invisible or zero-width characters found. |
| block_counts | object | Map of Unicode block names to character counts (e.g. Latin, Cyrillic, Greek). |
| has_mixed_scripts | boolean | True if the input mixes multiple writing scripts, a common phishing signal. |
| ascii_only | boolean | True if every character is plain ASCII with no Unicode lookalikes possible. |
| normalized | string | ASCII-folded form of the input with homoglyphs mapped back to their Latin equivalents. |
| is_suspicious | boolean | True if the input shows signs of a homoglyph or invisible-character attack. |
| risk_score | number | Phishing risk score from 0 (safe) to 100 (highly suspicious) based on findings. |
| risk_level | string | Categorical risk bucket such as low, medium, high, or critical. |
EXAMPLES — two ways to call
EXAMPLE 1 · curl
curl -X POST https://x402.agentutility.ai/homoglyph-check \
-H 'Content-Type: application/json' \
-d '{ }'first response =
402 Payment Required with payment requirements; sign + retry with X-PAYMENT.EXAMPLE 2 · mcp
# Install the MCP package for this endpoint's cluster npx -y @agentutility/mcp-<cluster> # Required: EVM private key with USDC on Base export X402_PRIVATE_KEY=0x... # Then call the homoglyph-check tool from your MCP-aware agent.
MCP server handles payment automatically — your coding agent just calls the tool by name.
METADATA
- tags
- homoglyphunicodephishingsecuritydomainspoofing
- methods
- POST
- cluster
- webprobe
- price
- $0.003 USDC per call
ADJACENT — other endpoints in webprobe
| endpoint | description | price |
|---|---|---|
| crates-io-stats | Fetches the public crates.io API record for a Rust crate and returns description, license, repository, homepage, documentation, keywords,… | $0.003 |
| crypto-news-api | Returns recent cryptocurrency headline metadata and sentiment. | $0.003 |
| jwt-decode | Decodes a JWT and inspects its claims without needing the signing key. | $0.003 |
| npm-package-stats | Fetches the public npm registry record for a package and returns description, license, repository, latest version, total version count, r… | $0.003 |
| pypi-package-stats | Fetches the public PyPI JSON record for a Python package and returns summary, license, homepage, repository, documentation, issues URL, a… | $0.003 |
| url-metadata-extract | Extracts page metadata from any URL: title, description, Open Graph and Twitter Card tags, canonical link, and favicon. | $0.003 |
| keyword-suggest | Keyword and autocomplete suggestions for any seed query. | $0.002 |
| arxiv-bibtex | Turns an arXiv paper into a BibTeX entry: pulls title, authors, year, abstract, and DOI from the arXiv API and generates a properly-forma… | $0.005 |
SEE ALSO