Pivot Search

Find related reports by shared infrastructure. Enter an IP, domain, or nameserver to discover all IOCs hosted on or resolving to the same target.

Searching related infrastructure...

How pivot search works

IP Address

Find all reports whose enriched DNS or hosting data contains the given IP. Reveals co-hosted phishing infrastructure.

Domain

Find reports targeting the same domain or subdomains. Clusters related phishing campaigns.

Nameserver

Find reports whose domains share a nameserver. Identifies attacker DNS infrastructure patterns.

Pivot data is derived from automatic enrichment (WHOIS, DNS, hosting lookup) performed on every submitted report. Results are limited to 50 per query. API documentation