Choose a research tool
Open Tools and choose a starting point. Tools assemble observations for an investigation; they do not grant ownership of the assets or authorize testing them.
| Starting point | Tool | What to inspect |
|---|---|---|
| A domain | Find subdomains | Returned names, estimate, coverage and export |
| A domain or spelling | Lookalike domains | Similar names and WHOIS evidence |
| A domain or icon hash | Favicons | Exact copies, visual similarity and associated hosts |
| A company or domain | Organization research | Domain inventory and its supporting records |
| Several domains | Compare domains | Observed differences across up to ten domains |
| A domain | Domain overview | Addresses, services, headers and certificates |
| An IP or prefix | IP overview | Network data and associated records |
| ASN, IP, prefix or name | Network overview | ASN data and prefixes |
| A domain | DNS observations | Previously recorded DNS answers |
| An IP | Domains on an IP | Names associated with an address |
| A domain or tracker | Shared tracking IDs | Tags and their observed connections |
| A domain | WHOIS | Registration records |
Subdomain enumeration
Enter the parent domain, wait for the estimate, then confirm the collection. The estimate can be lower than the number eventually known to the index and may be capped. The final result shows what was actually returned. See Subdomain API and Credits.
Organization research is not an organization workspace
The research tool finds observed domains related to an entity. An organization workspace manages your own team's members, client spaces, budgets and deliverables. Start a supported tool inside the client space when that organization should pay.