How do you spot a phishing site using an homograph attack in the address bar?

CHECK THE DOMAIN SPELLING FOR LOOKALIKE CHARACTERS FROM OTHER ALPHABETS.

Scammers register domain names that are visually identical to addresses of popular banks or marketplaces by replacing Latin letters with similar Cyrillic or Greek characters. Browsers treat such addresses as entirely different resources.

Using the Punycode Standard for Deception

Domain Name Systems support international characters using a special conversion format called Punycode. When pasting a fake link, the address bar may look identical to the original, but the actual technical request goes to a third-party scam server prefixed with xn--.

How to Protect Yourself from Fake Web Addresses

Open critical financial services only through pre-saved browser bookmarks.
Watch out for the automatic appearance of the xn-- prefix in the address bar when clicking links.
Verify security certificates and primary domain registration dates via Whois databases.
Use built-in browser and antivirus filters designed to block fake pages.