Browse / Agent tools
notimeftnoir/otacon
Domain impersonation detector — typosquatting, homoglyph and combosquat detection with an explained 0–100 risk score and a keyboard triage console. One command, no paid APIs.
Works.Tested on 2026-10-28. From the README alone, on Linux with Luna.

What we checked
Does it run from the README?Yes. Running in 1:31 on a clean Linux box.The run
Tested Oct 28, 2026, rev 4dfb41d.
Does it do what the README says?1 of 1 claims held up.Evidence
“Generate an offline wordlist without network traffic”
Expected 239 variants including examp1e.com. Got examp1e.com.
Which setups did we try?Works with Luna. Our Haiku test broke, so no mark there.Setups
Linux / Haiku: our test broke. Linux / Luna: works, Oct 28, rev 4dfb41d.
Needs keys, a login or a browser?No.Details
None seen
Is it safe to run?Made outbound connections: yes (hosts not recorded) by otaconWhat we saw
Review signals across current setups: connection review.
Repository processes attempted these non-loopback connections; proxies can hide the final hostname. 54 distinct locations. 30 attributed processes.
Reviewed as expected for a test run: attempted writes that failed, so nothing was written.
Full event, path and process lists for each observed setup:
A quiet run is not a safety guarantee.
Is it maintained?Maintained · 95 commits in 90 days · 51 merged PRs in 90 days · 0 open issues · 11 open PRsActivity
actively maintained: last commit 0 days ago; 95 commits and 51 merged PRs in 90 days; 0 open issues, 11 open PRs; latest release 2026-10-28
Can I show this on my README?Copy the badge.Badge
The run
Oct 28 · rev 4dfb41dIndependent test, not endorsed by the project.