A dnstwister alternative with screenshots, AI verdicts, and campaign detection

dnstwister is a genuinely useful service: free lookalike scans in the browser, low-cost monitoring, and a track record going back to 2015. If your question is "which domains similar to mine exist," it answers it. VigilDNS exists for the next questions: what is running on those domains, is it a clone of my site or a shop selling my goods, who is behind it, and are the right people seeing it in time to act.

What dnstwister does well

dnstwister, now branded DNS Twister, was founded in late 2015 by Robert Wallhead to broaden the audience for Marcin Ulikowski's dnstwist permutation algorithm, and it did that enormously. You can scan a domain for free with no email or credit card. Paid monitoring costs $4.99 a month for a single domain ($49.99 a year), with a free 4-week trial and no credit card, and multi-domain plans run from $29.99 a month for 10 domains to $89.99 a month for 100. Single-domain subscribers get alerts within 24 hours of a new A or MX record appearing on a domain similar to theirs, 30 days of alert history, country-level geolocation, RSS feeds, and a subscriber-only JSON API; multi-domain plans aggregate alerts into a once-daily email. The service says it scans over a billion existing SSL certificates plus more than 5 million newly registered certificates every day. It is simple and affordable, and for a solo founder watching one domain on a small budget it is a reasonable choice.

Where the comparison gets interesting: depth of evidence

Knowing a lookalike domain exists is step one. Deciding what to do about it requires evidence, and that is where the two services diverge. When VigilDNS finds a suspicious domain, it does not stop at the DNS records:

• Page screenshots with clone detection. VigilDNS renders the page and shows it side by side with your real site, so you can see a cloned login page rather than infer one from an A record. Each visible change is kept, dated, and hashed.
• AI threat verdicts. The top-risk domains get a judged intent (phishing, malware, counterfeit, parking, redirect, legitimate) with a confidence level and a written rationale, on top of a 0-100 risk score. You triage a ranked list, not a raw dump.
• Certificate history and live TLS. Every lookalike's certificates are kept, and a fresh certificate raises its risk score. See how certificate monitoring works.
• Campaign detection. Domains run by the same actor are clustered automatically via shared certificates, tracking IDs, and redirect targets, so 14 related domains show up as one campaign instead of 14 unrelated rows.
• Dormant threat detection. Domains that are registered but serve no DNS are flagged and verified against the registry, catching infrastructure that is staged but not yet active.
• Full DNS depth. Every record type (A, AAAA, MX, NS, CNAME, SPF, DMARC, DKIM, TXT) with change history, plus RDAP registration data and ASN/geo attribution.
• Tenants with member roles. Roles, shared visibility, and 3 to 25 seats depending on plan, so monitoring is not locked to one inbox.

If a lookalike of your domain has already appeared, our guide on what to do when someone registers a lookalike of your domain walks through the response. VigilDNS turns the evidence it collects into takedown-ready drafts: abuse emails grouped by the address that handles each lookalike, with an evidence PDF attached, for you to send from your own mail. To be fair to both sides of this comparison: dnstwister does not advertise a takedown service, VigilDNS never sends or files anything on your behalf, and VigilDNS does not monitor marketplaces, social media, the dark web, or app stores.

dnstwister vs VigilDNS at a glance

dnstwister details were checked against its public pages on 2026-09-28. Where a cell says "not published," those pages do not document the capability; check their site for current details.

When dnstwister is the better fit

• Minimal budget. If $79/mo is out of reach, dnstwister's low-cost plans plus its free scanner are far better than no monitoring at all.
• Many domains, existence alerts only. Its multi-domain plans cover up to 100 domains for $89.99 a month, which is hard to beat if all you need is a daily email when similar domains appear.
• One domain, one inbox. A solo operator who just wants an email when a similar domain appears does not need verdicts, screenshots, or seats.
• You investigate by hand. If your process is "tell me it exists, I will look into it myself," dnstwister covers that simply and reliably.

If you are weighing the open-source route instead, see our dnstwist comparison; for brand protection suites with marketplace coverage and takedown services, see BrandShield and Red Points.

Frequently asked questions

Is dnstwister free?

The one-off scan is free with no email or credit card required. Ongoing monitoring is a paid subscription from $4.99 a month for one domain, with a free 4-week trial. VigilDNS likewise offers a free scan, with monitoring plans from $79/mo.

What is the difference between dnstwist and dnstwister?

dnstwist is the open-source command-line tool by Marcin Ulikowski. dnstwister (now DNS Twister) is an independent web service, founded by Robert Wallhead in 2015, that set out to bring the dnstwist algorithm to a wider audience with hosted scans and email alerts.

Does dnstwister show screenshots of suspicious pages?

Page screenshots are not part of dnstwister's published feature set. VigilDNS captures screenshots of suspicious lookalikes automatically and runs side-by-side clone detection against your real site.

Why pay $79 when dnstwister starts at $4.99?

You are paying for triage depth: AI verdicts with written rationale, screenshots and clone detection, certificate history, campaign clustering, dormant threat detection, full DNS change history, takedown-ready drafts, and seats for your colleagues. If alert volume is low and you investigate by hand, dnstwister may be all you need.

See the difference on your own domain: run the free typosquat checker, then compare plans on the pricing page. Annual billing includes 2 months free.