Skill Detail

Generate and screen lookalike domains with dnstwist for brand abuse triage

Generate typosquat and homograph domain candidates, resolve them, and flag likely phishing or impersonation infrastructure before manual brand-abuse review.

Security & VerificationMulti-Framework
Security & Verification Multi-Framework Published
⭐ 5.7k GitHub stars
INSTALL WITH ANY AGENT
npx skills add agentskillexchange/skills --skill generate-and-screen-lookalike-domains-with-dnstwist-for-brand-abuse-triage Copy
Works best when you want a reusable capability, not another fragile one-off prompt.
At a glance
Tools required
Python, target brand or domain, DNS resolution, optional HTTP or screenshot follow-up for analyst review
Install & setup
pip install dnstwist
Author
elceef
Publisher
Open Source Project
Last updated
Apr 19, 2026
Quick brief

Use dnstwist when the immediate job is to generate lookalike domains for a known brand or domain, resolve them, and screen the results for likely phishing, typosquatting, or impersonation signals. The upstream project is explicitly focused on domain permutations and follow-up checks for brand abuse detection.

How it works

What this skill actually does

Invoke this instead of normal DNS tooling when the goal is abuse triage around confusingly similar domains, not generic hostname lookup or broad attack-surface enumeration. The scope boundary is tight: dnstwist generates permutations and screens them for review. It is not a general DNS platform, registrar product, or full reconnaissance suite.