Detect domain name typosquatting attack
In this post we will see different technique on how can we detect a similar looking domain, phishing attack using that domain. We will see offline and online methods to detect these attacks. What is typosquatting When ever you search for a domain and sometime you mistype a domain suddenly then what you get with a similar looking domain is a phishing domain this is called typosquatting and this technique could be used to hack or phish you by providing fake and similar looking domain.And this is what we are going to look on how can we detect these similar looking domain and block them. Spotting the similar looking domains STEP 1. Open your terminal and type git clone https://github.com/elceef/dnstwist.git && cd dnstwist STEP 2. Now install the dependencies , in the dnstwist folder type apt-get install libgeoip-dev libffi-dev STEP 3. Now type BUILD_LIB=1 pip install -r requirements.txt STEP 4. Now we will look for only those domai