Analytics Lookup
The Analytics Lookup tool detects all the analytics and tracking tags present on a domain, and shows you which other domains share the same tags.
How to use it?
Enter a domain (a wildcard like *.example.com is allowed) in the search bar and run the query. The tool returns every tracking ID found on that domain, then pivots on those IDs to surface other domains using the same ones. That second step is the point: it lets you tie together sites that belong to the same owner even when their WHOIS is redacted.
What kind of tags are detected?
| Tag type | Format | Description |
|---|---|---|
| Google Analytics (UA) | UA-* | Universal Analytics tags (legacy, sunset July 2023) |
| Google Analytics 4 | G-* | GA4 measurement IDs |
| Google Tag Manager | GTM-* | Tag Manager containers |
| Google AdSense | pub-*, ca-pub-* | AdSense publisher IDs |
| Google Ads | AW-* | Google Ads conversion tags |
| Facebook Pixel | FB/Pixel IDs | Meta tracking pixels |
How does it help?
The useful part is domain correlation. If two domains share the same Google Analytics or Tag Manager ID, they are very likely owned by the same person or organization, even when the WHOIS data is redacted. That's how you tie together all the domains of a single entity, link phishing domains back to a threat actor, or, during bug bounty recon, surface related assets through a shared tracking ID.
The results can be viewed in two modes: a flow view which visually connects tags to domains, and a matrix view which shows a compact grid.
Export
Results can be downloaded as JSON.
How many credits does it cost?
Each search you run spends 1 credit (see Credits). An account is required. The first correlation level is open to everyone; the deeper levels (2 and 3) need a Professional or Enterprise plan.