[rashkov]

Could be cool to have a honeypot that automatically visits those links via puppeteer or some other browser automation.

[heipei]

Check out urlscan.io which lets you scan URLs very conveniently and returns a report, including phishing and brand impersonation verdicts.

Disclaimer: I’m the founder ;)

[Robbedoes]

Am a fan of your work! Would it be useful if I throw these domains directly to URLScan? For retrieving the results I'll probably have to setup a proper DB and a workflow around parsing the Twitter content. Now, it's just a simple script.

[heipei]

Sure, I don't see why not, the worst thing that could happen is that the domain doesn't resolve or the webserver doesn't respond, but at least there will be a record of the domain having been scanned! Thanks for the kind words ;)

[Robbedoes]

Plan in the future is to visit the links, download malware and upload it to VirusTotal, Malwarebazaar, etc.