dnstwist is a simple domain reconnaissance tool that finds domain names similar to a target domain. It can generate possible lookalike domains using different fuzzing techniques and check their DNS information. dnstwist is useful for learning about domain security, phishing awareness, and typosquatting.
Here’s what you can do with dnstwist in Termux:
- Find similar domain names.
- Check registered and unregistered domains.
- Look up WHOIS information.
- Check GeoIP information.
- Check MX records.
- Detect HTTP and SMTP service banners.
- Generate domains using a custom dictionary.
- Save results in different formats.
- Take screenshots of web pages.
- Check visual similarity between websites.
Install dnstwist in Termux
Below are the simple commands to install dnstwist in Termux using pip. Copy and run each command one by one.
Update Termux packages.
pkg update && pkg upgrade -yInstall Python.
pkg install python -yInstall dnstwist.
pip install dnstwistdnstwist is now installed and ready to use.
Use dnstwist in Termux
After installing dnstwist, you can use different commands to find similar domains and check available information.
Scan a domain.
dnstwist example.comNote: dnstwist may take around 5–15 minutes to complete a domain scan because it checks similar domains and collects information from different sources.
Print all DNS records.
dnstwist -a example.comCheck HTTP and SMTP service banners.
dnstwist -b example.comGenerate more domains using a dictionary file.
dnstwist -d words.txt example.comSave results in CSV format.
dnstwist -f csv example.comSave results in JSON format.
dnstwist -f json example.comDisplay results as a list.
dnstwist -f list example.comUse selected fuzzing algorithms.
dnstwist --fuzzers homoglyph,addition example.comCheck GeoIP information.
dnstwist -g example.comCheck website similarity using LSH.
dnstwist --lsh example.comUse TLSH for website similarity.
dnstwist --lsh tlsh example.comCheck if MX hosts can be used to receive emails.
dnstwist -m example.comSave the results to a file.
dnstwist -o results.txt example.comShow only registered domains.
dnstwist -r example.comShow only unregistered domains.
dnstwist -u example.comCheck visual similarity using pHash.
dnstwist --phash example.comSave web page screenshots.
dnstwist --screenshots screenshots example.comSet the number of threads.
dnstwist -t 20 example.comLook up WHOIS information.
dnstwist -w example.comUse custom nameservers.
dnstwist --nameservers 8.8.8.8,1.1.1.1 example.comSet a custom User-Agent.
dnstwist --useragent "Mozilla/5.0" example.comSwap the TLD using a file.
dnstwist --tld tlds.txt example.comShow the help menu.
dnstwist --helpDisplay the installed version.
dnstwist --versionYou can combine different options to perform more detailed domain checks. For example, the following command shows only registered domains and saves the results as JSON:
dnstwist -r -f json -o results.json example.comEnd Note
dnstwist is a simple tool for checking similar domain names and exploring domain information. You can use its different commands to learn how lookalike domains are created and how they can be checked from the terminal.