DNSTwister — Typosquatting & Phishing Detector

Scan any public Git repository for leaked secrets — API keys, tokens, passwords, private keys — using the open-source gitleaks engine. Secrets are masked in output. For authorized security audits and your own repositories.

Enter your domain and get back the look-alike domains that are actually registered — typos, homoglyph (IDN) spoofs, TLD swaps and bitsquatting — each flagged for a live mail server, the signal it can send phishing email. Public DNS data only. For brand-protection and SOC teams.

Brand protection monitoring that checks your brand names against every domain actually registered in the last 24 hours plus new TLS certificates. Detects typosquats, homoglyph/IDN impersonation and combosquatting, and scores each domain 0-100 by phishing risk.

Enter a username and see where that handle is registered across 3000+ social, forum, gaming, dating and developer platforms — with a direct profile URL for each hit. Powered by the open-source Maigret engine (MIT); rated 5.0★ by users; JSON, CSV and Excel export plus REST API and scheduling.

Enter an email address and find out where it already has an account — 120+ platforms including LinkedIn, Twitter/X, Spotify, Pinterest, Adobe and Imgur. Nothing is sent to the address: no password-reset mail, no notification. Open-source holehe engine. Batch up to 500 addresses per run.

Discover subdomains of any domain fast using the open-source Subfinder engine — passive enumeration from dozens of public sources (certificate transparency, DNS datasets, search engines). For attack-surface mapping and authorized security research.

Check whether a domain is a phishing site or legitimate: threat-feed lookups, fraud pattern checks and look-alike domain detection, returned as a clear verdict per URL. Built for SOC analysts, compliance teams and brand-protection monitoring.

Protect your brand from typosquatting, social media impersonation, and online fraud.

Domain Ownership Checker

trovevault/domain-ownership-checker

Check registration dates, expiry, registrar, and availability status for any number of domains at once, without the one-at-a-time limitation of manual lookups. Uses RDAP (the modern replacement for WHOIS) to pull live data directly from domain registries. No API keys. No proxies. Results in seconds.

Find domains impersonating your brand. Generates typosquat, combosquat, homograph (punycode) and TLD-swap permutations, checks which are actually registered, then profiles each: mail servers, TLS, live pages, login forms and brand mentions. Returns a 0-100 risk score with takedown steps.

Check URLs against multiple free threat intelligence sources: Google Safe Browsing, domain age, redirect chains, suspicious patterns, and heuristic scoring. Returns a risk score (0-100) + verdict. No API key required for basic checks. $0.005 per URL.