analyzing-typosquatting-domains-with-dnstwist

What problem does it solve?

Typosquatting and brand impersonation domains enable phishing and brand damage. This Skill helps security teams quickly identify lookalike domains by generating permutations, checking DNS records, registration status, and visual similarity signals.

Core Features & Use Cases

• Domain permutation generation using multiple techniques (omission, addition, homoglyph, hyphenation, etc.)
• DNS resolution checks, MX presence, and registration status to prioritize threats
• Web similarity scoring (ssdeep/phash) to detect cloned sites
• Continuous monitoring and alerting for newly registered typosquats
• Use cases: incident response, brand protection, and threat-hunting for domains around your brand

Quick Start

Run a typosquatting scan against your target domain using the included workflow to generate permutations and identify high-risk domains.