Skip to main content

Tools search

The tools, as indicated by the name, are a collection of tools which perform specific requests on the hosts and DNS datasets and handle most of the search query complexity for you.

Subdomain enumeration​

You can perform a subdomain enumeration through the Profundis UI. The input field accepts domain names (e.g. somedomain.co.uk, example.com, etc). Note that you can also specify subdomains like api.domain.com if you expect to see other subdomains behind this value like sub.api.domain.com.

The results can be downloaded as TXT, JSON or CSV for further processing.

Subdomain enumeration requests hit a dedicated quota and can also be performed through our API.

Host details lookup​

This tool allows you to quickly get information about a specific host (click here to run a sample query). You can use it to:

  • Retrieve all the IP addresses which were ever used by this host.
  • See the ASN information about each of the IPs retrieved.
  • Discover other ports being exposed for this host.
  • Get all the other hosts which also use this IP.

This tool impacts your quota by 1 search quota and 1 result quota per execution.

ASN details lookup​

This tool allows you to identify the ASN related to a specific IP. You can try to run a sample query.