yuyudhn/tldhuntBash-based domain availability checker that scans WHOIS records across multiple TLDs to find unregistered domains for red teaming and phishing infrastructure setup.
TLDHunt is a command-line tool designed to help users find available domain names for their online projects or businesses. By providing a keyword and a list of TLD (top-level domain) extensions, TLDHunt checks the availability of domain names that match the given criteria. This tool is particularly useful for those who want to quickly find a domain name that is not already taken, without having to perform a manual search on a domain registrar website.
For red teaming or phishing purposes, this tool can help you to find similar domains with different extensions from the original domain.
[!NOTE]
Tested on: Kali GNU/Linux Rolling with whois v5.5.15
This tool is written in Bash and requires the following dependencies:
Make sure these are installed on your system. In Debian-based systems, you can install them using the following command:
sudo apt install whois curl -y
To detect whether a domain is registered or not, we search for the words "Name Server", "nserver", "nameservers", or "status: active" in the output of the WHOIS command, as this is a signature of a registered domain (thanks to Alex Matveenko for the suggestion).
If you have a better signature or detection method, please feel free to submit a pull request.
For the default Top Level Domain list (tlds.txt), we use data from https://data.iana.org. You can update this list directly using the --update-tld flag, which fetches the latest TLDs from IANA and saves them to tlds.txt.
You can also use a custom TLD list, but ensure it is formatted like this:
.aero
.asia
.biz
.cat
.com
.coop
.info
.int
.jobs
.mobi
➜ TLDHunt ./tldhunt.sh
_____ _ ___ _ _ _
|_ _| | | \| || |_ _ _ _| |_
| | | |__| |) | __ | || | ' \ _|
|_| |____|___/|_||_|\_,_|_||_\__|
Domain Availability Checker
Keyword is required.
Usage: ./tldhunt.sh -k <keyword> [-e <tld> | -E <exts>] [-x] [--update-tld]
Example: ./tldhunt.sh -k linuxsec -E tlds.txt
: ./tldhunt.sh --update-tld
Update the default TLD list from IANA:
./tldhunt.sh --update-tld
Check domain availability using the default TLD list:
./tldhunt.sh -k linuxsec -E tlds.txt
Check domain availability using a custom TLD list:
./tldhunt.sh -k linuxsec -E custom-tld.txt
Show only unregistered domains:
./tldhunt.sh -k linuxsec -E tlds.txt --not-registered
