Can I use this for automated monitoring?

Yes, the skill includes a continuous monitoring pipeline script that tracks new findings and saves known domains to a persistent JSON file for recurring scans.

What is DNSTwist and how does it work?

DNSTwist is a domain name permutation engine that generates similar-looking domains using techniques like character substitution, homoglyphs, and bitsquatting to find potentially malicious registered domains.

Does this skill identify homograph attacks?

Yes, it specifically identifies homoglyph permutations where visually identical Unicode characters (like using 'rn' for 'm') are used to deceive users.

What actionable outputs does the skill generate?

It generates prioritized risk analysis reports, firewall-compatible blocklists, and structured markdown templates for requesting domain takedowns.

How does this skill detect phishing sites specifically?

It uses DNS resolution to find active domains and fuzzy hashing (ssdeep) to compare the similarity of a suspected domain's web content against your legitimate site, flagging high-similarity clones.

Analyzing Typosquatting Domains with DNSTwist

Name: Analyzing Typosquatting Domains with DNSTwist
Author: mukul975

bymukul975

•

4,121

•

安全与测试

Identifies and analyzes lookalike domains and phishing threats using the DNSTwist permutation engine to protect brands from impersonation.

This skill empowers security analysts and AI agents to proactively detect typosquatting, homograph attacks, and brand impersonation by generating thousands of domain permutations. It provides a structured workflow to resolve DNS records, evaluate web content similarity via fuzzy hashing (ssdeep), and prioritize threats based on high-risk factors like MX record presence and recent registration dates. Ideal for SOC operations and threat hunting, it streamlines the transition from detection to mitigation by generating automated blocklists and formal takedown reports.

主要功能

014,121 GitHub stars

02Comprehensive DNS resolution for A, AAAA, NS, and MX records

03Automated generation of domain permutations using 12+ fuzzing techniques

04Risk-based prioritization logic to identify high-threat domains

05Visual and content similarity scoring using ssdeep fuzzy hashing

06Automated generation of firewall blocklists and takedown reports

使用场景

01Proactive brand protection and phishing site detection

02Security incident investigation involving malicious lookalike links

03Continuous monitoring for new typosquat domain registrations

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add mukul975/anthropic-cybersecurity-skills analyzing-typosquatting-domains-with-dnstwist

For use in Claude.ai and ChatGPT

主要功能

014,121 GitHub stars

02Comprehensive DNS resolution for A, AAAA, NS, and MX records

03Automated generation of domain permutations using 12+ fuzzing techniques

04Risk-based prioritization logic to identify high-threat domains

05Visual and content similarity scoring using ssdeep fuzzy hashing

06Automated generation of firewall blocklists and takedown reports

使用场景

01Proactive brand protection and phishing site detection

02Security incident investigation involving malicious lookalike links

03Continuous monitoring for new typosquat domain registrations

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add mukul975/anthropic-cybersecurity-skills analyzing-typosquatting-domains-with-dnstwist

For use in Claude.ai and ChatGPT