Getting started
Your first lookup
Search accepts an address, prefix, ASN or provider name and infers the entity type.
A single search field accepts four entity types. The type is inferred from the input; no selection is required.
| You type | You get |
|---|---|
45.83.91.1 | The verdict for that address |
37.19.196.0/23 | The prefix, with the providers inside it |
AS9009 or 9009 | The network, with its provider distribution |
nordvpn | The provider profile |
Then follow the evidence
- Read the verdict and the confidence. Confidence 3 on a single provider supports acting on the attribution.
- Open Evidence for the method, observation count and observation dates.
- Use Pivots to move between entities. Each is annotated with the size of the result set, narrowest first.
- Each lookup is recorded in the investigation graph at the top of the page.