git clone https://github.com/Telefonica/typodetect

python3 pip install -r requirements.txt

python3 typodetect.py -h

usage: typodetect.py [-h] [-u UPDATE] [-t N_THREADS] [-d DOH_SERVER] [-o OUTPUT] domain

positional arguments:
  domain                specify domain to process

optional arguments:
  -h, --help            show this help message and exit
  -u UPDATE, --update UPDATE
                        (Y/N) for update TLD's database (default:N)
  -t N_THREADS, --threads N_THREADS
                        Number of threads for processing (default:5)
  -d DOH_SERVER, --doh DOH_SERVER
                        Section DoH for use: [1] ElevenPaths (default) [2] Cloudfare
  -o OUTPUT, --output OUTPUT
                        JSON or TXT, options of filetype (default:JSON)

python3 typodetect.py <domain>

python3 typodetect.py -u y <domain>

python3 typodetect.py -t <number of threads> <domain>

python3 typodetect.py -d 2 <domain>

python3 typodetect.py -o TXT <domain>

elevenpaths.com2021-01-26T18:20:10.34568.json

{ id: 
    "report_DoH" : <string>
    "domain": <string>
    "A": [ip1, ip2, ...]
    "MX": [mx1, mx2, ...]
    }

id: Integer id of mutation
"report_DoH": ""        - Domain of Descentralised DNS
              "Malware" - Domain reported as dangerous for DoH
              "Good"    - Domain reported as good for DoH
"domain": Mutation detected as active.
"A": IP's address of A type in DNS of the mutation.
"MX": IP's or CNAME of MX type in DNS of the mutation.