Homoglyph Detector & Replacer — Unicode Security Tool
Detect and replace unicode homoglyph characters that impersonate Latin letters. Essential security tool for identifying phishing attempts, domain spoofing, and text manipulation.
Homoglyph Detector & Replacer Security Tool
Detect unicode characters that impersonate Latin letters — a common technique in phishing, spoofing, and domain impersonation attacks.
Homoglyph Detector & Replacer
Detect unicode homoglyph characters that impersonate Latin letters — a critical security tool for identifying phishing, spoofing, and impersonation attacks.
Common Attack Examples
| Deceptive | Looks Like | Danger |
|---|---|---|
| paypal.com (Cyrillic) | paypal.com | Phishing |
| аррӏе.com | apple.com | Domain spoofing |
| g00gle.com (zero) | google.com | Typosquatting |
What Are Homoglyphs?
Homoglyphs are characters that appear identical or nearly identical to other characters from a different writing system or alphabet. Attackers exploit this visual similarity for:
- Phishing emails — spoofed sender addresses
- Domain impersonation — fake websites that look legitimate
- Social engineering — misleading messages and content
- Code injection — hidden characters in identifiers
Detection Categories
- Cyrillic — Russian letters that mimic Latin (а, е, о, р, с, х, у)
- Greek — Greek letters similar to Latin (α, β, γ, ε, ο, π)
- Mathematical — Unicode math symbols (𝔸, 𝔹, ℂ)
- Invisible — Zero Width Space, Joiner, BOM characters
How to Protect
- Always paste suspicious URLs/domains into this detector
- Check email sender addresses character by character
- Use the “Replace All” function to get safe text
- Enable the hex analysis tab for detailed codepoint info
FAQs
What is a homoglyph attack?
A homoglyph attack uses unicode characters that look identical or very similar to Latin letters to deceive. For example, Cyrillic 'а' (U+0430) looks identical to Latin 'a' but is a different character. Attackers use this for phishing, domain spoofing, and social engineering.
What characters are detected?
The detector identifies Cyrillic lookalikes (а, е, о, р, с, х, у), Greek lookalikes (α, β, γ), mathematical Unicode (𝔸, 𝔹), and invisible characters like Zero Width Space (U+200B) and Zero Width Joiner (U+200D).
What's the risk level?
High risk: Cyrillic and Greek homoglyphs used in domains and emails. Medium risk: Mathematical Unicode in normal text. Invisible characters are always high risk as they're hidden.
How do I use this tool?
Paste any text, URL, email, or domain name and click 'Detect' to find homoglyphs. Click 'Replace All' to get clean text with homoglyphs converted to Latin equivalents. Use sample buttons to see example attacks.
Can I export results?
Yes! Copy the clean text after running 'Replace All'. The Hex/codepoint tab shows detailed Unicode analysis for each character.