coldpass

Browse / Agent tools

notimeftnoir/otacon

Domain impersonation detector — typosquatting, homoglyph and combosquat detection with an explained 0–100 risk score and a keyboard triage console. One command, no paid APIs.

    Works.Tested on 2026-10-28. From the README alone, on Linux with Luna.

    Share card: notimeftnoir/otacon works
    The card X shows when you post.Download

    What we checked

    Does it run from the README?Yes. Running in 1:31 on a clean Linux box.The run
    Does it do what the README says?1 of 1 claims held up.Evidence

    “Generate an offline wordlist without network traffic”

    Expected 239 variants including examp1e.com. Got examp1e.com.

    Which setups did we try?Works with Luna. Our Haiku test broke, so no mark there.Setups

    Linux / Haiku: our test broke. Linux / Luna: works, Oct 28, rev 4dfb41d.

    Needs keys, a login or a browser?No.Details

    None seen

    Is it safe to run?Made outbound connections: yes (hosts not recorded) by otaconWhat we saw

    Review signals across current setups: connection review.

    Repository processes attempted these non-loopback connections; proxies can hide the final hostname. 54 distinct locations. 30 attributed processes.

    Reviewed as expected for a test run: attempted writes that failed, so nothing was written.

    Full event, path and process lists for each observed setup:

    A quiet run is not a safety guarantee.

    Is it maintained?Maintained · 95 commits in 90 days · 51 merged PRs in 90 days · 0 open issues · 11 open PRsActivity

    actively maintained: last commit 0 days ago; 95 commits and 51 merged PRs in 90 days; 0 open issues, 11 open PRs; latest release 2026-10-28

    Recent commits on GitHub

    Can I show this on my README?Copy the badge.Badge
    ![coldpass](https://coldpass.dev/badge/notimeftnoir--otacon.svg)

    The run

    Oct 28 · rev 4dfb41d
    0:000:301:001:31

    Independent test, not endorsed by the project.