Unspoofer – Gmail script that catches Unicode homoglyph phishing

1 comments

• yoelf22 5 hours ago

    I kept getting phishing emails where the display name looked like "Wіх.соm" (with Cyrillic і and о) but the actual sender was info@bistro-pub.de.
    Gmail doesn't flag these.
  
    So I built a Google Apps Script that:
    - Runs every 15 minutes via trigger
    - Normalizes ~80 Cyrillic/Greek/fullwidth Unicode characters to ASCII
    - Checks display names against 50+ brand domains
    - Compares the implied brand vs actual sender domain
    - Flags mismatches with a label and star
  
    No extension install, no third-party access — runs entirely within Apps Script with just Gmail permissions.