DoD: a regularly scheduled GitHub action that looks for similarly named domains with same/similar content. If any are found, opens a ticket with probing instructions and how to report if malicious.
Some ideas:
- Use
dnstwist to gather candidates
- Look for signs of similarity
- Provide instructions for posting a Google Safe Browsing report
- Consider checking Certificate Transparency Logs as well.
DoD: a regularly scheduled GitHub action that looks for similarly named domains with same/similar content. If any are found, opens a ticket with probing instructions and how to report if malicious.
Some ideas:
dnstwistto gather candidates