Skill Detail

Generate and screen lookalike domains with dnstwist for brand abuse triage

Generate typosquat and homograph domain candidates, resolve them, and flag likely phishing or impersonation infrastructure before manual brand-abuse review.

Security & VerificationMulti-Framework
Security & Verification Multi-Framework Published
⭐ 5.7k GitHub stars
COPY SKILL INSTRUCTIONS (OPTIONAL)
npx skills add agentskillexchange/skills --skill generate-and-screen-lookalike-domains-with-dnstwist-for-brand-abuse-triage Copy
Uses the third-party skills CLI, not an ASE-owned installer. Check your agent’s compatibility. This copies instructions; complete the upstream tool setup below separately.
At a glance
Tools required
Python, target brand or domain, DNS resolution, optional HTTP or screenshot follow-up for analyst review
Install & setup
pip install dnstwist
Author
elceef
Publisher
Open Source Project
Last updated
Apr 19, 2026
Quick brief

Use dnstwist when the immediate job is to generate lookalike domains for a known brand or domain, resolve them, and screen the results for likely phishing, typosquatting, or impersonation signals. The upstream project is explicitly focused on domain permutations and follow-up checks for brand abuse detection.

How it works

What this skill actually does

Invoke this instead of normal DNS tooling when the goal is abuse triage around confusingly similar domains, not generic hostname lookup or broad attack-surface enumeration. The scope boundary is tight: dnstwist generates permutations and screens them for review. It is not a general DNS platform, registrar product, or full reconnaissance suite.