Detect Typo Squatting And Phishing With Dnstwist.it

Typo squatting, also known as URL hijacking is a type of cybersquatting where an attacker registers a domain name that is similar to a legitimate domain, but with common misspellings in the domain.

Background:

Dnstwist.py is a free online tool that can be used to detect typo squatting. Typo squatting is the act of registering a domain name that is similar to an existing, trademarked name in order to profit from traffic that is mistakenly directed to the site. Dnstwist.py can be used to compare two domains and determine if they are registered by the same person or company.

Exercise:

Use dnstwist.py to detect typo-squatters.

Example:

Looking up any domain reveals a multitude of links that look extremely similar, but could link to somewhere malicious.