Scan for domain siblings

Prev Next

Domain siblings are domain names that share the same second-level domain name with a target domain, but have a different top-level domain (TLD). For example, if the target domain is example.com, its domain siblings might include example.net, example.org, and so on.

Domain siblings can be used in various ways, both legitimate and malicious. An organization may register multiple domain names that share the same second-level domain name in order to redirect traffic or protect their brand, however, threat actors may use domain siblings to impersonate a legitimate domain or website in order to deceive users and steal sensitive information.

  1. Navigate to Advanced Query Builder > Domain Queries > siblings

  2. Specify a domain

  3. Click Search

Saving queries

Organizational users are able to save individual queries ran from Advanced Query Builder, and store them in the Private Queries menu for future analysis, or to share with their organization.

  1. Specify the query parameters

  2. Click Save Query

  3. Give your query a Name

  4. Specify a Description to add more context

  5. Click Save