elceef/dnstwist

Health v2 · maintenance only

Adoption not part of the score

5730 stars · 851 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

dnstwist is a Python command-line tool that generates permutations of a domain name (typos, homoglyphs, IDN tricks) and checks which ones resolve, to detect phishing and brand impersonation. It is widely used in threat hunting and OSINT workflows.

Use cases

• find typosquatted domains impersonating my brand
• detect homograph phishing attacks on our domain
• monitor for look-alike domains registered by attackers
• threat hunting for phishing infrastructure
• check which domain permutations resolve to active hosts
• OSINT investigation of suspicious domains

When to choose

• you need to enumerate and check look-alike domains for phishing or typosquatting
• you want a lightweight, scriptable CLI for brand protection and threat intelligence
• you need IDN/homoglyph-aware domain permutation

When to avoid

• you need full-scale brand monitoring with takedown services
• you want a GUI-based phishing detection platform
• you need email or content-based phishing detection rather than domain-based

Facets

cli-tool · maturity active

security fuzzing search-engine web-scraping security osint networking developer-tools python cli windows cross-platform phishing-detection typosquatting homograph-attack domain-permutation threat-intelligence dns brand-impersonation idn-homoglyph linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="elceef/dnstwist")