DNSTwist detects lookalike domains used in homograph phishing, typosquatting, and brand impersonation.
openSquat
openSquat detects look-alike domains that resemble an organization’s legitimate domains, helping identify possible impersonation.

About openSquat
openSquat is an open-source OSINT tool that scans daily newly registered domain feeds for look-alike domains based on user-supplied keywords. It identifies types including typosquatting, IDN homograph, doppelganger and bitsquatting variants that may impersonate a brand.
It runs from the command line on Python 3.10+ and supports validation with Quad9 DNS, Certificate Transparency logs, VirusTotal, port checks for 80/443 and phishing database cross-reference. Results can be saved in TXT, JSON and CSV, with confidence levels 0-4. It uses an open-core model with Community, Premium Feed and Premium API modes.
Key features
- Scans daily newly registered domain feeds for look-alike domains
- Detects typosquatting, IDN homograph, doppelganger and bitsquatting variants
- Validates domains with Quad9 DNS and Certificate Transparency checks
- Checks domain reputation through VirusTotal integration
- Exports results in TXT, JSON and CSV formats
- Provides confidence levels 0-4 and Community, Premium Feed and API modes
- Open-source core installable via pip or repository clone
- Combines similarity detection with DNS, certificate, VirusTotal and phishing checks
- Supports TXT, JSON and CSV output with adjustable confidence levels
- Requires Python 3.10+ setup and command-line use with a keyword file
- Lower confidence thresholds return more results with more false positives
- Advanced capabilities are delivered through commercial services requiring an API key
openSquat at a glance
- Category
- Privacy & Security › Website & URL Scanners
- Type
- Open-source project
- Pricing
- Not confirmed. Check the site
- Open source
- Yes · Source code
- Language
- English
- Last checked
- Oct 5, 2026 · Online when checked
- Listed
- Oct 5, 2026
openSquat alternatives
Tools and sites you could use instead, ranked by how closely they match.
isMalicious checks IP addresses, domains, URLs, emails, phone numbers, and cryptocurrency wallets against threat intelligence data.
Validin provides a community platform for threat intelligence teams to research and share security information.
DomainRecon looks up DNS records, WHOIS details, SSL certificates, and IP addresses for a domain.
Subhunt enumerates subdomains using passive sources such as certificate transparency records.
DNSai provides DNS lookups and analysis tools for records, WHOIS, blacklists, email authentication, and domains.
Popular in Website & URL Scanners
Well-known listings from the same topic.
openSquat FAQ
What is needed to run openSquat?
How do confidence levels work?
What operating modes are available?
Tell us and an editor will check it.
Claim the listing and suggest updates yourself. An editor checks every claim first.












