dnstwist
Generates and checks domain permutations to detect typosquatting and phishing lookalikes.
dnstwist is an open-source command-line utility that generates domain name permutations based on various mutation techniques. It checks these variations against DNS records and WHOIS data to identify potentially registered lookalike domains. Security researchers and domain owners use it to detect typosquatting, homograph attacks, and other phishing infrastructure targeting their brand.