Connect

OpenBait Lookalike Domains

openbaitbyopenbait
•
Analytics & Monitoring
Security & Testing

Discover typosquatting, homoglyphs, and potential brand impersonation domains by checking DNS resolution and live landing pages.

OpenBait Lookalike Domains is a hosted, read-only MCP server designed to protect brand identity by surfacing lookalike and typosquatting domains. It systematically analyzes variations of a brand's website—including character omissions, transpositions, homoglyphs, added keywords, and alternative TLDs—to determine if candidates resolve via DNS and inspect what their front pages display. Operating over streamable HTTP with no authentication or local setup required, it allows AI assistants to quickly flag potentially malicious domains, monitor brand risks, and assist security teams without exposing the LLM to untrusted page content.

Key Features

01Multi-pattern domain permutation analysis covering homoglyphs, keywords, omissions, transpositions, and TLD swaps
02DNS resolution verification and homepage content classification (e.g., brand-page matches, redirects, or blank sites)
03Severity scoring (0–100) indicating likelihood of brand confusion and immediate review priority
04Zero-configuration hosted endpoint requiring no API keys, accounts, or local installations
05Safety-focused design omitting external page text to prevent prompt injection or untrusted data reaching the model
060 GitHub stars

Use Cases

01Monitoring brand impersonation and identifying phishing or typosquatting campaigns targeting your company
02Auditing defensive domain registrations to ensure core brand variations redirect correctly
03Investigating suspicious domain variations during incident response and threat intelligence workflows