Systems and methods for preventing potential phishing attacks by translating double-byte character set domain name system records

1. A computer-implemented method for preventing potential phishing attacks by translating double-byte character set domain name system records, at least a portion of the method being performed by one or more computing devices comprising at least one processor, the method comprising:

extracting, by the one or more computing devices, a domain extension from a double-byte character set (DBCS) domain name in a universal resource locator (URL);

identifying, by the one or more computing devices, a locale code associated with a language utilized on the one or more computing devices;

determining, by the one or more computing devices, if the domain extension matches the locale code;

translating, by the one or more computing devices, the DBCS domain name to a corresponding single byte character set (SBCS) domain name system (DNS) record when the domain extension matches the locale code; and

performing, by the one or more computing devices, a security action that protects against a potential phishing attack based on the translated DBCS domain name.

2. The computer-implemented method of claim 1 , wherein extracting the domain extension comprises receiving the URL from at least one of:

a web browser;

a hypertext markup language (HTML) web page; or

one or more hyperlinks from a host section on the HTML web page.

3. The computer-implemented method of claim 1 , wherein determining if the domain extension matches the locale code comprises comparing a location associated with the domain extension with a location associated with the locale code to determine a match.

4. The computer-implemented method of claim 1 , wherein translating the DBCS domain name to a corresponding single byte character set (SBCS) DNS record when the domain extension matches the locale code comprises:

determining that a DNS record corresponding to the DBCS domain name is unlisted in a database of DNS records comprising locales associated with the locale code;

translating the DBCS domain name to at least one of an English language dictionary word or a trademark; and

saving the translated DBCS domain name as a SBCS DNS record in the database.

5. The computer-implemented method of claim 4 , wherein determining that the DNS record corresponding to the DBCS domain name is unlisted in a database of DNS records comprising locales associated with the locale code comprises:

entering the URL in a web browser associated with the database; and

receiving a site not found error for the DBCS domain name in the web browser.

6. The computer-implemented method of claim 1 , wherein performing the security action that protects against a potential phishing attack based on the translated DBCS domain name comprises validating a root certificate for a website associated with the URL against a root certificate for a primary website associated with the DNS record.

7. The computer-implemented method of claim 6 , wherein validating the root certificate comprises:

comparing the root certificate for the website associated with the URL to the root certificate for the primary website associated with the DNS record; and

determining that the website associated with the URL is safe when there is a match between the root certificate associated with the URL and the root certificate for the primary website associated with the DNS record.

8. The computer-implemented method of claim 6 , wherein validating the root certificate comprises:

comparing the root certificate for the website associated with the URL to the root certificate for the primary website associated with the DNS record; and

determining that the website associated with the URL is unsafe when there is a mismatch between the root certificate associated with the URL and the root certificate for the primary website associated with the DNS record; and

flagging the unsafe website as a potential phishing website.

9. The computer-implemented method of claim 1 , wherein the domain extension comprises a top-level domain.

10. The computer-implemented method of claim 1 , wherein the locale code comprises a country code for a country associated with a DBCS language.

11. A system for preventing potential phishing attacks by translating double-byte character set domain name system records, the system comprising:

at least one physical processor;

physical memory comprising computer-executable instructions and one or more modules that, when executed by the physical processor, cause the physical processor to:

extract, by an extraction module, a domain extension from a double-byte character set (DBCS) domain name in a universal resource locator (URL) received by a computing device;

identify, by an identification module, a locale code associated with a language utilized on the computing device;

determine, by a determining module, if the domain extension matches the locale code;

translate, by a translation module, the DBCS domain name to a corresponding single byte character set (SBCS) domain name system (DNS) record when the domain extension matches the locale code; and

perform, by a security module, a security action that protects against a potential phishing attack based on the translated DBCS domain name.

12. The system of claim 11 , wherein the extraction module extracts the domain extension by receiving the URL from at least one of:

a web browser;

a hypertext markup language (HTML) web page; or

one or more hyperlinks from a host section on the HTML web page.

13. The system of claim 11 , wherein the determining module determines if the domain extension matches the locale code by comparing a location associated with the domain extension with a location associated with the locale code to determine a match.

14. The system of claim 11 , wherein the translation module translates the DBCS domain name to a corresponding single byte character set (SBCS) DNS record when the domain extension matches the locale code by:

determining that a DNS record corresponding to the DBCS domain name is unlisted in a database of DNS records comprising locales associated with the locale code;

translating the DBCS domain name to at least one of an English language dictionary word or a trademark; and

saving the translated DBCS domain name as a SBCS DNS record in the database.

15. The system of claim 14 , wherein the determining module determines that the DNS record corresponding to the DBCS domain name is unlisted in a database of DNS records comprising locales associated with the locale code by:

entering the URL in a web browser associated with the database; and

receiving a site not found error for the DBCS domain name in the web browser.

16. The system of claim 11 , wherein the security module performs the security action that protects against a potential phishing attack based on the translated DBCS domain name by validating a root certificate for a website associated with the URL against a root certificate for a primary website associated with the DNS record.

17. The system of claim 16 , wherein the security module validates the root certificate by:

comparing the root certificate for the website associated with the URL to the root certificate for the primary website associated with the DNS record; and

determining that the website associated with the URL is safe when there is a match between the root certificate associated with the URL and the root certificate for the primary website associated with the DNS record.

18. The system of claim 16 , wherein the security module validates the root certificate by:

comparing the root certificate for the website associated with the URL to the root certificate for the primary website associated with the DNS record; and

determining that the website associated with the URL is unsafe when there is a mismatch between the root certificate associated with the URL and the root certificate for the primary website associated with the DNS record; and

flagging the unsafe website as a potential phishing website.

19. The system of claim 11 , wherein the domain extension comprises a top-level domain.

20. A non-transitory computer-readable medium comprising one or more computer-executable instructions that, when executed by at least one processor of a computing device, cause the computing device to:

extract a domain extension from a double byte character set (DBCS) domain name in a universal resource locator (URL);

identify a locale code associated with a language utilized on the computing device;

determine if the domain extension matches the locale code;

translate the DBCS domain name to a corresponding single byte character set (SBCS) domain name system (DNS) record when the domain extension matches the locale code; and

perform a security action that protects against a potential phishing attack based on the translated DBCS domain name.