Skip to main content

Tools

The tools, as indicated by the name, are a collection of tools which perform specific requests on the hosts and DNS datasets and handle most of the search query complexity for you.

Subdomain enumeration​

You can perform a subdomain enumeration through the Profundis UI. The input field accepts domain names (e.g. somedomain.co.uk, example.com, etc). Note that you can also specify subdomains like api.domain.com if you expect to see other subdomains behind this value like sub.api.domain.com.

The results can be downloaded as TXT, JSON or CSV for further processing.

Subdomain enumeration costs 1 credit per 100 subdomains returned (rounded up), and free accounts are capped at 300 subdomains per enumeration — see Credits. It can also be performed through our API.

Host details lookup​

This tool allows you to quickly get information about a specific host (click here to run a sample query). You can use it to:

  • Retrieve all the IP addresses which were ever used by this host.
  • See the ASN information about each of the IPs retrieved.
  • Discover other ports being exposed for this host.
  • Get all the other hosts which also use this IP.

This tool spends 1 credit per execution (see Credits).

ASN details lookup​

This tool allows you to identify the ASN related to a specific IP. You can try to run a sample query. ASN / autonomous-system lookups are free — the data is public registry information, so they never cost a credit.

Other tools​

Each of the following tools has its own dedicated documentation page:

Last updated on