Yogesh Ojha ca80dc8ba0 feat(lookalikes): registered typo, homoglyph and TLD variants of a target's domain ...

A Lookalike domains stage in the Analysis group generates permutations of the
target's registrable domain with dnstwist, resolves them with dnsx (a, aaaa, mx,
ns, one retry of silent names) and keeps the registered ones. A name whose only
answer is its TLD's wildcard address is dropped. Registered lookalikes are
fetched and compared with the target's page (ssdeep), and the highest ranked are
read over RDAP for registrar and creation date. Passive intensity skips the fetch.

Each lookalike carries one verdict: linked to target, similar page, MX
configured, parked, web content or registered. Linked is a redirect to the apex,
non-shared nameservers in common with it, or a project target. Placeholder MX
values and domain marketplace landers are not counted as mail or web content.

Rows live in lookalike_domains per scan; review state lives in lookalike_triage
per target and domain, so it carries across runs. The scan overview and the
target page show a lookalike line beside the associated domains, the target page
adds a cell, and a sheet lists the lookalikes with the changed characters marked,
per-verdict filters, records per row and review actions.

dnstwist and ppdeep join the tools package.

2026-09-25 09:24:23 +05:30

..

definitions

feat(lookalikes): registered typo, homoglyph and TLD variants of a target's domain

2026-09-25 09:24:23 +05:30

enums

feat(http_probe): follow the names responses mention

2026-09-24 22:37:08 +05:30

models

feat(lookalikes): registered typo, homoglyph and TLD variants of a target's domain

2026-09-25 09:24:23 +05:30

schemas

chore: production-readiness review across the tree

2026-09-13 18:03:29 +05:30

services

feat(lookalikes): registered typo, homoglyph and TLD variants of a target's domain

2026-09-25 09:24:23 +05:30

utils

style(copy): reduce the host-pacing module docstring to its noun phrase

2026-09-25 09:21:25 +05:30

.gitignore

cleanup precommit hooks

2026-01-26 15:02:53 +05:30

config.py

fix(worker): stall reaper waits for every scan worker, eight control slots

2026-09-24 21:28:03 +05:30

http.py

fix(scan): make a rate a stage budget, and close the last reported gaps

2026-09-13 12:47:15 +05:30

logging.py

fix(celery): dispatch the canvas one step at a time, not nested

2026-09-22 19:31:15 +05:30

plugins.py

refactor(plugins): one discovery, not seven near-copies of it

2026-09-16 08:44:59 +05:30

pyproject.toml

feat(scan): name and describe the long tail of ports, with brand marks

2026-09-04 02:59:14 +05:30

redis.py

refactor(redis): one connection per process, shared across packages

2026-09-16 08:03:19 +05:30

sse.py

chore: production-readiness review across the tree

2026-09-13 18:03:29 +05:30

uv.lock

Implement WHOIS service with RDAP provider integration

2026-02-07 10:43:08 +05:30