Guide
Comment vérifier si un domaine étrange est du Punycode
Méthode rapide pour confirmer si une chaîne de domaine inhabituelle est un Punycode valide.
Un domaine qui paraît suspect n’est pas forcément du Punycode. Vérifiez d’abord le format avant d’agir.
Start with the xn-- prefix check
Punycode labels usually start with xn--.
If no label has this prefix, the domain may still be ASCII, Unicode, or another token format.
Validate label structure
Each label should follow normal domain constraints such as no empty segments and no leading/trailing hyphens.
Invalid structure often means the string is malformed, not valid Punycode.
Decode in a trusted tool
Decode the candidate label and inspect the Unicode output.
If decoding fails cleanly, it is likely not valid Punycode.
- Normalize full-width dots first.
- Test the full domain, not one fragment.
- Keep the original raw value for audit trail.
Compare against expected destination
After decoding, compare the result with known legitimate domains.
For sensitive actions, confirm certificate info or official registrar records.
Document the outcome clearly
Record whether the domain was valid Punycode, malformed input, or unrelated encoding.
Clear notes reduce repeated investigation across teams.
Helpful for
- Security triage of suspicious links.
- Support tickets about unreadable domains.
- QA checks on redirect destinations.
- Reviewing logs with mixed domain formats.
Verify format before action
Check structure first, decode second, then validate ownership and intent. This avoids overreacting to harmless IDN encoding.