dnstwist

dnstwist is a domain name permutation engine for detecting typo-squatting, phishing, and corporate espionage. It helps identify potentially malicious domains that are visually similar to a target domain.

Key features:

• Domain permutation: Generates a large number of domain variations based on common typos, character substitutions, and bit flipping.
• DNS resolution: Checks if the generated domains are registered and resolves their IP addresses.
• Fuzzy matching: Groups similar domains together to highlight potential phishing campaigns.
• IDN support: Handles internationalized domain names.

Use cases:

• Brand protection: Identify and monitor domains that could be used to impersonate your brand.
• Phishing detection: Discover potential phishing sites targeting your users.
• Security audits: Assess the risk of typo-squatting attacks against your organization.
• Threat intelligence: Gather information about malicious actors and their infrastructure.