D3-HD Homoglyph Detection

Comparing strings using a variety of techniques to determine if a deceptive or malicious string is being presented to a user.

How it works A homoglyph, in this context, is a deceptive string or word which looks like a trusted word, but is composed of different characters, for example: goooogle.com versus google.com. This is commonly found in phishing and typo squatting attacks where a human exploiting through a social engineering campaign. Considerations • In very large environments processing DNS queries can be computationally expensive due to the amount of traffic that is generated • Legitimate companies and products use non-dictionary words in their names that could result in many false positives