dnstwist is a domain name permutation engine for detecting typo-squatting, phishing, and corporate espionage. It helps identify potentially malicious domains that are visually similar to a target domain.
Key features:
- Domain permutation: Generates a large number of domain variations based on common typos, character substitutions, and bit flipping.
- DNS resolution: Checks if the generated domains are registered and resolves their IP addresses.
- Fuzzy matching: Groups similar domains together to highlight potential phishing campaigns.
- IDN support: Handles internationalized domain names.
Use cases:
- Brand protection: Identify and monitor domains that could be used to impersonate your brand.
- Phishing detection: Discover potential phishing sites targeting your users.
- Security audits: Assess the risk of typo-squatting attacks against your organization.
- Threat intelligence: Gather information about malicious actors and their infrastructure.
