Infrastructure Pivot
infrastructure_pivotPivot on a nameserver, IP, MX host, certificate issuer or registrar to find other domains sharing that value and map related infrastructure.
Instructions
Find other domains DechoNet has seen with the same infrastructure value — a nameserver, IP address, MX host, certificate issuer or registrar — with first and last seen, to map related infrastructure (e.g. other phishing domains on the same rare nameserver). Use it after domain_history or dns_lookup gives you a distinctive value. Shared infrastructure (CDN edges, public CAs, large registrars and DNS hosts) returns a count only, since sharing it says nothing about ownership. Read-only; REQUIRES a free DechoNet API key (account page; remote: send Authorization: Bearer dn_…, npm: set DECHONET_API_KEY); up to 20 rows per call (higher for some keys); rate-limited. Coverage: only DechoNet's own observations.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| kind | Yes | Which kind of value to pivot on. | |
| value | Yes | The value itself, e.g. 'ns1.example-dns.net' or '203.0.113.9'. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| kind | Yes | ||
| note | No | ||
| total | Yes | ||
| value | Yes | ||
| targets | Yes | ||
| receipts | No | Signed observation receipts behind this result, one per lookup: when, from where and under which rules version DechoNet observed it. Each url shows the record and checks its Ed25519 signature. | |
| reportUrl | Yes | ||
| sharedInfra | No |