Takes a list of domains to monitor and looks for newly registered domain permutations, puts them in an Excel document and then sends out notifications via email with the Excel document attached.

The first email sends all the currently registered domain permutations along with the Excel document. Sub-sequent emails are sent when a newly registered domain permutation is detected, and it includes the updated Excel document with the new domain permutation.

The Excel document contains the following columns for each registered domain:

• Permutation Type:
  • Bitsquatting, omissin, substituion, et..
• Date Created
• Last Updated
• Registrant Name
• Organization
• PHash
  • This is a visual hash of the site. A higher value may indicate it more closely resembles the original site and indicate an adversary setting up infrastructure for phishing attempts.
• Name Server
• IP
• Mail Server
• Registered Email 1
• Registered Email 2 (if it exists)

• config.ini

  • Use this to configure email for sending alert emails.

• monitored_domains.txt

  • Place one domain per line in this file to monitor them
• It is recommended to set up a cron job to run the domain hunter script at regular intervals (1 day, 1 week, 1 month, et..) that best fit your use case.