A system, comprising: a processor configured to: receive a DNS data stream, wherein the DNS data stream includes a DNS query and a DNS response for resolution of the DNS query; apply a homograph detector for a domain in the DNS data stream, configured to: decode the domain to Unicode; and map each character of the Unicode to an ASCII character using an ASCII to Unicode map, wherein the ASCII to Unicode map is generated using a convolutional neural network and trained using training data; and detect a homograph of a domain name in the DNS data stream using the homograph detector, configured to: perform one or more of the following: A) perform a lookup on a target list; and identify matches based on the lookup; B) apply similarity score metrics; and identify nearby/close matches based on threshold similarity scores; and/or C) implement a k-nearest neighbor; and identify matches based on k-NN threshold distance results; and a memory coupled to the processor and configured to provide the processor with instructions. a processor configured to: receive a DNS data stream, wherein the DNS data stream includes a DNS query and a DNS response for resolution of the DNS query; apply a homograph detector for a domain in the DNS data stream, configured to: decode the domain to Unicode; and map each character of the Unicode to an ASCII character using an ASCII to Unicode map, wherein the ASCII to Unicode map is generated using a convolutional neural network and trained using training data; and detect a homograph of a domain name in the DNS data stream using the homograph detector, configured to: perform one or more of the following: A) perform a lookup on a target list; and identify matches based on the lookup; B) apply similarity score metrics; and identify nearby/close matches based on threshold similarity scores; and/or C) implement a k-nearest neighbor; and identify matches based on k-NN threshold distance results; and receive a DNS data stream, wherein the DNS data stream includes a DNS query and a DNS response for resolution of the DNS query; apply a homograph detector for a domain in the DNS data stream, configured to: decode the domain to Unicode; and map each character of the Unicode to an ASCII character using an ASCII to Unicode map, wherein the ASCII to Unicode map is generated using a convolutional neural network and trained using training data; and decode the domain to Unicode; and map each character of the Unicode to an ASCII character using an ASCII to Unicode map, wherein the ASCII to Unicode map is generated using a convolutional neural network and trained using training data; and detect a homograph of a domain name in the DNS data stream using the homograph detector, configured to: perform one or more of the following: A) perform a lookup on a target list; and identify matches based on the lookup; B) apply similarity score metrics; and identify nearby/close matches based on threshold similarity scores; and/or C) implement a k-nearest neighbor; and A) perform a lookup on a target list; and identify matches based on the lookup; B) apply similarity score metrics; and identify nearby/close matches based on threshold similarity scores; and/or C) implement a k-nearest neighbor; and identify matches based on k-NN threshold distance results; and a memory coupled to the processor and configured to provide the processor with instructions.