dnstwist
« Back to VersTracker
Description:
Test domains for typo squatting, phishing and corporate espionage
Type: Formula  |  Latest Version: 20250130@4  |  Tracked Since: Dec 17, 2025
Links: Homepage  |  @elceef  |  formulae.brew.sh
Category: Security
Tags: security dns reconnaissance threat-intelligence pentesting networking
Install: brew install dnstwist
About:
dnstwist is a powerful domain squatting detection tool that generates and monitors potential typo-squatted domains. It leverages various techniques including permutation algorithms and fuzzy hashing to identify phishing attempts and brand impersonation targeting your organization.
Key Features:
  • Generates hundreds of potential typo-squatted domain permutations
  • Supports multiple DNS checks and MX record verification
  • Integrates with threat intelligence feeds and SSDEEP for similarity hashing
  • Provides real-time monitoring and HTML content comparison
  • Extensible with custom plugins for enhanced detection
Use Cases:
  • Monitoring for brand impersonation and phishing campaigns targeting your organization
  • Security auditing to identify potential typo-squatting vulnerabilities
  • Threat intelligence gathering for domain-based attacks
  • Incident response and investigation of phishing attempts
Alternatives:
  • urlcrazy – Similar domain permutation tool but with different feature set and output format
  • dnstwist-ng – Community fork with additional features and updated domain algorithms
License: Apache-2.0
Dependencies: certifi, libmaxminddb, python@3.14, ssdeep, whois
Bottles available for: arm64_tahoe, arm64_sequoia, arm64_sonoma, sonoma, arm64_linux, x86_64_linux
Version History
Detected Version Rev Change Commit
Sep 15, 2025 3:42am 3 VERSION_BUMP a35d5be1
Nov 19, 2024 2:17pm 1 VERSION_BUMP 1eea1306
Nov 19, 2024 11:52am 1 VERSION_BUMP 0c6d14cf
Oct 12, 2024 11:15am 0 VERSION_BUMP 456ebe96