Squat Scorer

Squat Scorer is a python script that can be used to score typosquatted domains using the Virus Total API. This tool is meant to be used with dnstwister, a free online tool that will query DNS records for typosquatted domains.

Typosquatted domains can be used by adversaries to conduct phishing attacks and brand fraud against organizations. This script combines the power of dnstwister's typosquatted domain lookups with the intelligence of the Virus Total API to deliver additional context to typosquatted domain threats.

Set Up

• Create a free account on Virus Total and copy your API key from your account. Assign your key to the variable API_KEY in squat-scorer.py

  • Virus Total Documentation

• Go to https://dnstwister.report/ and generate a report for the domain of your choice. Once generated, export the results to a CSV file and save it locally.

Run

To run the script: python3 squat-scorer.py {filename}

The dnstwister input file usually looks something like dnstwister_report_company.com.csv, unless you renamed it after downloading it.