{"categories":[{"label":"Security","url":"https://skillfed.io/packages/category/security/3"}],"enrichment":{"capability":"Generates domain name permutations to detect typosquatting, phishing, and brand impersonation attacks, with optional live phishing detection via HTML and visual similarity analysis.","skillfed_tags":["threat-intelligence","domain-security","phishing-detection"],"use_cases":["Monitor for typosquatted domains targeting your organization and alert on newly registered lookalikes","Conduct phishing campaign reconnaissance by generating domain variants and checking for active phishing pages","Audit brand impersonation risk by discovering domains that visually or semantically resemble your legitimate domain","Integrate domain threat intelligence into security workflows via the Python API to automate threat detection","Perform passive domain enumeration to generate permutation lists without DNS queries for offline analysis"],"what_it_does":"dnstwist is a domain fuzzing tool that generates permutations of a given domain name to uncover potentially malicious lookalike domains. It applies multiple fuzzing algorithms (homoglyph, hyphenation, transposition, and others) to create variants and then verifies which ones are registered via DNS lookups. The tool is designed to help organizations identify typosquatting, phishing, and brand impersonation threats targeting their domain.\n\nBeyond basic domain enumeration, dnstwist offers advanced threat detection: it can compare HTML source code of discovered domains against the original using fuzzy hashing (ssdeep or TLSH) to detect phishing sites with similar content, capture and compare web page screenshots using perceptual hashing when Chromium is available, detect rogue MX hosts, and perform GeoIP lookups on resolved addresses. Results can be exported to CSV or JSON, and the tool exposes a Python API for programmatic use.","worth_installing":"Yes, if you need to monitor for domain-based threats. The tool is well-maintained despite aging status, has no external dependencies, and offers both CLI and programmatic interfaces. Install the base package for core fuzzing; add optional dependencies only if you need phishing detection or GeoIP features. No known vulnerabilities."},"id":"dnstwist","links":{"html":"https://skillfed.io/packages/dnstwist","md":"https://skillfed.io/packages/dnstwist.md","pypi":"https://pypi.org/project/dnstwist/"},"maintenance":{"status":"aging"},"meta":{"latest_release":"2025-01-30","license_spdx":null,"license_treatment":"permissive","name":"dnstwist","python_support":"unspecified","summary":"Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation"},"popularity":{"monthly_downloads":119741,"position":12058,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"20250130"}