Unspoof Unicode Text

Report an Issue

Help us improve by telling us what went wrong.

Embed this Tool

Customize and copy the embed code for your website.

Detect and Remove Unicode Spoofing From Text

Unicode spoofing is one of the most insidious techniques in the social engineering playbook. By replacing ordinary Latin characters with visually identical characters from other Unicode scripts - Cyrillic, Greek, Armenian, and others - attackers can create domain names, usernames, email addresses, and code that looks perfectly legitimate but is actually something entirely different. The Unspoof Unicode Text tool detects these deceptive substitutions and converts spoofed text back to its intended ASCII equivalent, revealing what is really there.

Understanding the Homoglyph Threat

A homoglyph is a character that looks identical or nearly identical to another character from a different script. The Cyrillic letter "a" (U+0430) is visually indistinguishable from the Latin letter "a" (U+0061) in most fonts. The Greek omicron (U+03BF) looks exactly like the Latin letter "o" (U+006F). There are hundreds of these lookalike pairs across Unicode's many scripts, and they create a serious security problem.

Consider a phishing email that directs you to "paypal.com" - except the "a" in "paypal" is actually Cyrillic. Your browser resolves this to a completely different domain controlled by the attacker, but visually it looks identical to the real PayPal URL. This is an internationalized domain name (IDN) homoglyph attack, and it has been used in real-world phishing campaigns targeting banks, tech companies, and government agencies.

What This Tool Does

The Unspoof Unicode Text tool analyzes your input character by character, identifying any non-ASCII characters that have visually similar ASCII equivalents. It then reports which characters are suspicious and offers to replace them with their standard Latin counterparts. The result is text that has been normalized to pure ASCII where possible, with all spoofing attempts neutralized.

The detection goes beyond simple one-to-one character matching. The tool checks for mixed-script text - strings that combine characters from multiple Unicode scripts in ways that are linguistically implausible. A domain name that mixes Latin and Cyrillic characters is almost certainly a spoofing attempt, because no legitimate language writes that way. The tool flags these mixed-script strings even when individual characters might not be obvious homoglyphs on their own.

Who Needs to Unspoof Unicode Text?

Security analysts and incident responders. When investigating phishing campaigns, analyzing malicious URLs, or reviewing suspicious email headers, identifying Unicode spoofing is a critical skill. The Unicode unspoofing tool accelerates this analysis by instantly revealing which characters in a suspicious string are not what they appear to be. Instead of manually checking code points, you paste the text and get a clear report.

Software developers building input validation. Any application that accepts usernames, URLs, email addresses, or other identity-related strings from users needs to defend against homoglyph attacks. Understanding how spoofing works - by using a tool like this to see examples - informs the validation rules you build into your application. Many developers test their validation logic by generating spoofed strings and verifying that their code catches them.

Domain administrators and brand protection teams. Companies monitoring for lookalike domains that impersonate their brand need to analyze suspicious domain registrations. A domain that looks like your company name but uses Cyrillic characters will be caught by this tool immediately. Brand protection services use similar analysis to identify potential phishing infrastructure before it reaches customers.

Educators and trainers. Cybersecurity instructors teaching about social engineering, phishing, and Unicode attacks need demonstration tools. The Unspoof Unicode Text tool provides a live, interactive way to show students how homoglyph attacks work and how to detect them. Seeing the Cyrillic-to-Latin replacement happen in real time makes the lesson concrete and memorable.

Beyond Domains - Code and Document Spoofing

Homoglyph attacks are not limited to domain names. Source code can contain Unicode lookalike characters that change the behavior of programs while appearing correct in code review. A variable named with a Cyrillic "c" instead of a Latin "c" is a different variable entirely, but it looks identical in most editors. This attack vector - sometimes called a Trojan Source attack - has been documented in academic research and represents a real supply chain risk. Running source code through a Unicode unspoofing tool can reveal these hidden substitutions.

Processing happens entirely in your browser. The text you analyze - which might contain sensitive URLs, credentials, or proprietary content - never leaves your machine. Paste suspicious text into the Unspoof Unicode Text tool and see the truth behind the characters.