---
title: "Network and Registration Analysis"
slug: "tools-network-and-registration-analysis"
updated: 2026-01-07T15:37:06Z
published: 2026-01-07T15:37:06Z
---

> ## Documentation Index
> Fetch the complete documentation index at: https://help.silentpush.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Network and Registration Analysis

The Xperimental Queries Tools section includes a suite of utilities for analyzing Network infrastructure and registration data. These tools, ASN Lookup, ASN Subnet Information, and Live RDAP Whois Lookup, enable security teams to investigate Autonomous System Numbers (ASNs), subnet details, and real-time registration data, aiding in threat intelligence and domain verification.

## ASN Lookup

This tool retrieves detailed information about a specified ASN, identifying network ownership and routing for threat tracing.

1. From the left navigation menu, select **Advanced** **Query Builder > Xperimental Queries > Tools - ASN Lookup**.
2. Specify an ASN number.
  - (Optional) Customize result format or depth (if available).
3. Click **Search**.

## ASN Subnet Information

This tool provides a breakdown of subnet data for an ASN, mapping network ranges to identify vulnerabilities or malicious activity.

1. From the left navigation menu, select **Advanced Query Builder > Xperimental Queries > Tools - ASN Subnet Information**.
2. Specify an ASN number.
  - (Optional) Filter by subnet range or metadata (if available).
3. Click **Search**.

## Live RDAP WHOIS Lookup

This tool performs real-time RDAP (Registration Data Access Protocol) lookups for domains, IPs, or ASNs, delivering structured JSON data with enhanced privacy and performance.

1. From the left navigation menu, select **Advanced Query Builder > Xperimental Queries > Tools - Live RDAP WHOIS Lookup**.
2. Select a query type (Domain, IP, ASN).
3. Specify the query name.
  - (Optional) Choose a results format (compact or full).
4. Click **Search**.

## Save Query

1. Specify query parameters.
2. Click **Save Query**.
3. Provide a **Name** and **Description** for context.
4. Click **Save**. The query appears in [**Private Queries**](https://help.silentpush.com/docs/private-queries).

The IP address or subnet used in typosquatting queries to identify domains mimicking legitimate ones, aiding in the detection of phishing or fraudulent infrastructure.

Autonomous System Number, a unique numeric identifier assigned to an Autonomous System (AS) for managing IP address routing within and between networks on the internet

A feature leveraging passive DNS data to investigate and correlate related threats, such as associated IPs, domains, or other indicators.

The network segment associated with an IP address, used to contextualize and analyze related infrastructure.

Publicly available data collected during domain registration or DNS updates, used to analyze domain ownership and history.