dnstwist

Install command:
brew install dnstwist

Test domains for typo squatting, phishing and corporate espionage

https://dnstwist.it

License: Apache-2.0

Development: Pull requests

Formula JSON API: /api/formula/dnstwist.json

Formula code: dnstwist.rb on GitHub

Bottle (binary package) installation support provided for:

macOS on
Apple Silicon
golden gate ✅
tahoe ✅
sequoia ✅
Linux ARM64 ✅
x86_64 ✅

Current versions:

stable ✅ 20250130

Revision: 13

Depends on:

certifi 2026.10.23 Mozilla CA bundle for Python
libmaxminddb 1.14.1 C library for the MaxMind DB file format
python@3.15 3.15.2 Interpreted, interactive, object-oriented programming language
ssdeep 2.14.1 Recursive piecewise hashing tool

Depends on when building from source:

rust 1.99.1 Safe, concurrent, practical language

Uses from macOS: libffi

Binaries: dnstwist

Analytics:

30 days90 days365 days
Installs1112571,250
Installs (--HEAD)001
Installs on Request1112571,250
Installs on Request (--HEAD)001
Build Errors0

Known vulnerabilities in the current version:

GHSA-494j-54xm-rwp3 AIOHTTP: Secure attribute not enforced for shared cookie
GHSA-5wr8-gcqf-gqf3 aiohttp server lacks an initial request/header timeout
GHSA-6cjc-53gc-5rqm AIOHTTP: Connector pool exhaustion via Max-Age overflow
GHSA-9xw5-w5jj-pvcg AIOHTTP: File descriptor exhaustion in multipart requests
GHSA-f9xw-jh8m-3mwq AIOHTTP: Absolute-form request targets can spoof Request.scheme
GHSA-gx76-c99x-2c96 AIOHTTP: Cookie from subdomain can remove Host-Only Scope from existing cookies
GHSA-pqxq-w44r-73xw AIOHTTP: Pure-Python parser request smuggling
GHSA-2g87-pp6c-29x5 aiohttp: Multiple instances of excessive or unbounded memory/CPU use

Data from Homebrew/advisory-database. Run brew vulns dnstwist for a live check.