Typosquat & Lookalike Domain Detector with Threat Signals

Check if websites are phishing scams or legitimate. Protect yourself from malicious domains and fraud.

WHOIS Domain Lookup: Operational Domain Intelligence

ryanclinton/whois-domain-lookup

Look up WHOIS and RDAP registration data for any domain in bulk. Get registrar details, creation and expiry dates, nameservers, domain age, registrant info, DNSSEC status, and EPP status codes -- all without needing any API key.

Open Source Supply Chain Risk MCP

ryanclinton/open-source-supply-chain-risk-mcp

OSS supply chain risk intelligence with dependency graph propagation, bus-factor analysis, and typosquat detection.

Find registered lookalike domains impersonating your brand: typos, homoglyphs, hyphenations, phishing prefixes, and TLD swaps, checked live against DNS. Flags domains with a mail server (spoofing-capable) and shows registration dates. Keyless, no browser. Pay per lookalike found.

Attack Surface Intelligence — Certificate Transparency

ryanclinton/crt-sh-search

Turn Certificate Transparency logs into attack-surface intelligence. Find new subdomains, exposed admin/VPN/DevOps services, brand-abuse look-alikes, and infrastructure drift, each with a risk score, recommended action, and investigation priority. Findings and executive summary included.

Brand Narrative Intelligence MCP Server

ryanclinton/brand-narrative-intelligence-mcp

Brand reputation and disinformation detection intelligence for AI agents via the Model Context Protocol.

Find registered look-alike domains (typosquatting, homoglyphs, TLD swaps) impersonating your brand — powered by the open-source dnstwist engine. Public DNS data only. For brand protection and authorized security research.

Brand protection monitoring that checks your brand names against every domain actually registered in the last 24 hours plus new TLS certificates. Detects typosquats, homoglyph/IDN impersonation and combosquatting, and scores each domain 0-100 by phishing risk.

Phishing URL Risk Scorer — URL Safety & Security Analyzer

perryay/phishing-url-risk-scorer

Enterprise-grade URL phishing risk analysis using 14+ detection signals. Multi-factor scoring combining URL patterns, domain analysis, SSL validation, redirect chain inspection, security header audit, and page content analysis. Ideal for automated phishing detection and SOC workflows.

Comprehensive brand reputation threat intelligence engine that runs 8 sub-actors in parallel and applies four proprietary scoring models — Brand Threat Assessment, Domain Impersonation Detection, Review Authenticity Analysis, and Narrative Drift Tracking — to produce a DEFCON-rated threat report...