Pivot map
Use this map to decide whether Domainiq accepts the lead you are holding, and what kind of lead it may return for the next step.
Pivot from here
Outputs from Domainiq can become inputs for the next tool. These are the most relevant follow-on pivots in the library.
A global, open, stable, and secure Internet that serves the entire Asia Pacific community
ARIN is a nonprofit, member-based organization that administers IP addresses & ASNs in support of the operation and growth of the Internet.
AbuseIPDB provides IP reputation data and community abuse reports for identifying malicious hosts in network and threat investigations.
AccountKiller provides direct deletion links and step-by-step instructions for removing accounts on hundreds of websites and social platforms.
Investigator Use
DomainIQ is a domain intelligence and WHOIS research platform that provides comprehensive historical and current registration data, domain portfolio analysis, reverse WHOIS lookups, and domain-to-IP mapping. It helps investigators identify all domains registered by the same entity, trace domain ownership across registration changes, and map the domain infrastructure of organizations and individuals.
For OSINT investigators, DomainIQ's reverse WHOIS functionality is one of its most valuable features. By searching for a registrant name, email address, phone number, or organization name, investigators can retrieve all domains ever registered by that entity. This capability transforms a single identifying data point into a complete domain portfolio, revealing the full scope of an individual's or organization's domain activity.
Domain portfolio analysis is critical for fraud investigations, brand protection work, and corporate intelligence. A domain registrant operating a fraud scheme typically registers multiple domains as primary sites go offline or are taken down — reverse WHOIS reveals the entire infrastructure rather than just the domain currently being investigated. Similarly, corporate investigations may reveal that an individual controls numerous domains across different business names.
DomainIQ's historical WHOIS data preserves registration records even after privacy protection is applied or registrant information is changed. This historical record is essential because privacy-protecting WHOIS services have made current registration data opaque for many domains — historical records from before privacy protection was applied can contain personally identifying information.
The platform's domain monitoring features alert investigators when specific domains are registered, transferred, or their WHOIS data changes — useful for actively monitoring whether a suspect registers new domains or when a monitored brand is targeted by new phishing domain registrations.
Domain-to-IP mapping and reverse IP lookup identify all domains hosted on the same server, which is valuable for infrastructure mapping — criminal actors frequently host multiple fraudulent sites on the same IP address.
Document all WHOIS data retrieved with the query date, as WHOIS records are updated dynamically and historical states matter for establishing the timeline of domain activity.
Before You Pivot
Capture the target, search terms, and why this source is relevant before you leave the page.
Archive volatile pages, save screenshots, and keep timestamps for anything that may change.
Treat one tool as a lead source. Confirm important findings with independent sources.
Related tools
ARIN is a nonprofit, member-based organization that administers IP addresses & ASNs in support of the operation and growth of the Internet.
Free online network tools, including traceroute, nslookup, dig, whois, ping, and our own Domain Dossier and Email Dossier. Works with IPv6.
An open source intelligence tool to crawl the graph of certificate Alternate Names
Finds certificates and subdomains using Certificate Transparency data. An alternative to crt.sh that presents the information a bit differently.
DNS History archives historical DNS records, letting investigators track IP changes, hosting migrations, and infrastructure pivots over time.
DNS Twister generates and monitors domain permutations for typosquatting detection, brand protection, and phishing infrastructure discovery.