You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: cloud/assets/associated-domains.mdx
+22-22Lines changed: 22 additions & 22 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -11,17 +11,17 @@ Need advanced workflows or custom domain discovery configurations? Our team can
11
11
Modern enterprises frequently have complex infrastructures spread across many domains and business units. ProjectDiscovery's **Associated Domains Discovery** gives security teams instant visibility into their entire organizational attack surface by automatically discovering related domains through multiple intelligence sources.
12
12
13
13
The platform correlates data from **three primary sources**:
14
-
-**Acquisition History**— Corporate subsidiaries and acquired companies from business intelligence sources
-**WHOIS History**- Domain registration records identifying common ownership
17
17
18
18
This multi-source approach ensures comprehensive coverage, discovering domains that might be missed when relying on a single data source.
19
19
20
20
---
21
21
22
22
## Why Associated Domains Discovery Matters
23
23
24
-
Tracking assets across multiple organizations, subsidiaries, and technical infrastructures is notoriously difficult when done manually. Security teams traditionally had to compile lists of related domains from internal knowledge or public records, then run separate scans for each—a time-consuming and error-prone process.
24
+
Tracking assets across multiple organizations, subsidiaries, and technical infrastructures is notoriously difficult when done manually. Security teams traditionally had to compile lists of related domains from internal knowledge or public records, then run separate scans for each-a time-consuming and error-prone process.
25
25
26
26
### Common Challenges
27
27
@@ -59,7 +59,7 @@ ProjectDiscovery integrates with corporate intelligence sources to automatically
59
59
|`acquirer_name`| Parent organization name |
60
60
|`source_url`| Link to source information |
61
61
62
-
When you onboard to the platform, it automatically pulls known subsidiaries and related entities—giving you an instant snapshot of your organization's broad footprint without manual research.
62
+
When you onboard to the platform, it automatically pulls known subsidiaries and related entities-giving you an instant snapshot of your organization's broad footprint without manual research.
63
63
64
64
### Certificate History
65
65
@@ -123,57 +123,57 @@ Access [Associated Domains](https://cloud.projectdiscovery.io/assets/domains) in
123
123
124
124
Query associated domains programmatically using the [Associated Domains API](/api-reference/enumerations/get-associated-domains).
125
125
126
-
**Default behavior**— Returns associated domains for all your verified domains:
126
+
**Default behavior**- Returns associated domains for all your verified domains:
127
127
128
128
```bash
129
129
curl -X GET "https://api.projectdiscovery.io/v1/domain/associated" \
130
130
-H "X-Api-Key: YOUR_API_KEY"
131
131
```
132
132
133
-
**Query specific domain**— Optionally specify a domain to get its associated domains:
133
+
**Query specific domain**- Optionally specify a domain to get its associated domains:
134
134
135
135
```bash
136
-
curl -X GET "https://api.projectdiscovery.io/v1/domain/associated?domain=example.com" \
136
+
curl -X GET "https://api.projectdiscovery.io/v1/domain/associated?domain=meta.com" \
137
137
-H "X-Api-Key: YOUR_API_KEY"
138
138
```
139
139
140
140
**Filter by source:**
141
141
142
142
```bash
143
143
# Only acquisition history
144
-
curl -X GET "https://api.projectdiscovery.io/v1/domain/associated?domain=example.com&source=acquisition_history" \
144
+
curl -X GET "https://api.projectdiscovery.io/v1/domain/associated?domain=meta.com&source=acquisition_history" \
145
145
-H "X-Api-Key: YOUR_API_KEY"
146
146
147
147
# Only certificate history
148
-
curl -X GET "https://api.projectdiscovery.io/v1/domain/associated?domain=example.com&source=certificate_history" \
148
+
curl -X GET "https://api.projectdiscovery.io/v1/domain/associated?domain=meta.com&source=certificate_history" \
149
149
-H "X-Api-Key: YOUR_API_KEY"
150
150
151
151
# Multiple sources
152
-
curl -X GET "https://api.projectdiscovery.io/v1/domain/associated?domain=example.com&source=certificate_history,whois_history" \
152
+
curl -X GET "https://api.projectdiscovery.io/v1/domain/associated?domain=meta.com&source=certificate_history,whois_history" \
153
153
-H "X-Api-Key: YOUR_API_KEY"
154
154
```
155
155
156
156
**Filter by liveness:**
157
157
158
158
```bash
159
159
# Only active/reachable domains
160
-
curl -X GET "https://api.projectdiscovery.io/v1/domain/associated?domain=example.com&active=true" \
160
+
curl -X GET "https://api.projectdiscovery.io/v1/domain/associated?domain=meta.com&active=true" \
161
161
-H "X-Api-Key: YOUR_API_KEY"
162
162
```
163
163
164
164
**Pagination and sorting:**
165
165
166
166
```bash
167
167
# Paginated results sorted by subdomain count
168
-
curl -X GET "https://api.projectdiscovery.io/v1/domain/associated?domain=example.com&limit=50&page=1&sort=subdomain_count" \
168
+
curl -X GET "https://api.projectdiscovery.io/v1/domain/associated?domain=meta.com&limit=50&page=1&sort=subdomain_count" \
169
169
-H "X-Api-Key: YOUR_API_KEY"
170
170
```
171
171
172
172
**Raw output (plain text):**
173
173
174
174
```bash
175
175
# Get just domain names, one per line
176
-
curl -X GET "https://api.projectdiscovery.io/v1/domain/associated?domain=example.com&raw=true" \
176
+
curl -X GET "https://api.projectdiscovery.io/v1/domain/associated?domain=meta.com&raw=true" \
177
177
-H "X-Api-Key: YOUR_API_KEY"
178
178
```
179
179
@@ -189,7 +189,7 @@ The API returns comprehensive information about each discovered domain:
@@ -204,7 +204,7 @@ The API returns comprehensive information about each discovered domain:
204
204
"evidence": {
205
205
"acquired_company": "Subsidiary Inc",
206
206
"acquired_date": "2023-06-15",
207
-
"acquirer_name": "Example Corp",
207
+
"acquirer_name": "Meta",
208
208
"active": true,
209
209
"subdomain_count": 45,
210
210
"status_code": 200,
@@ -215,8 +215,8 @@ The API returns comprehensive information about each discovered domain:
215
215
"domain": "example-cdn.com",
216
216
"sources": ["certificate_history"],
217
217
"evidence": {
218
-
"cert_common_name": "*.example.com",
219
-
"cert_org_name": "Example Corporation",
218
+
"cert_common_name": "*.meta.com",
219
+
"cert_org_name": "Meta Platforms, Inc.",
220
220
"cert_issuer": "DigiCert Inc",
221
221
"cert_issued_date": "2024-01-15",
222
222
"cert_expiry_date": "2025-01-15",
@@ -228,7 +228,7 @@ The API returns comprehensive information about each discovered domain:
228
228
"domain": "example-backup.com",
229
229
"sources": ["whois_history"],
230
230
"evidence": {
231
-
"registrant_org": "Example Corporation",
231
+
"registrant_org": "Meta Platforms, Inc.",
232
232
"registrar": "GoDaddy",
233
233
"registration_date": "2020-03-10",
234
234
"expiry_date": "2025-03-10",
@@ -267,9 +267,9 @@ The API returns comprehensive information about each discovered domain:
267
267
268
268
### Maximize Discovery Coverage
269
269
270
-
1.**Use all sources:** Don't filter by source initially—let the platform correlate across all three sources for maximum coverage.
270
+
1.**Use all sources:** Don't filter by source initially-let the platform correlate across all three sources for maximum coverage.
271
271
272
-
2.**Check inactive domains:** Domains marked as `active: false` may still be valuable—they could be parked domains or temporarily down services that attackers might target.
272
+
2.**Check inactive domains:** Domains marked as `active: false` may still be valuable-they could be parked domains or temporarily down services that attackers might target.
273
273
274
274
3.**Review subdomain counts:** High subdomain counts often indicate active infrastructure worth investigating further.
275
275
@@ -300,7 +300,7 @@ Associated Domains Discovery is not a one-time static pull. The platform continu
300
300
-**Acquisition intelligence:** Corporate events are tracked and correlated with domain ownership
301
301
-**Liveness probing:** Domain reachability is regularly checked and updated
302
302
303
-
As your organization grows—launching new websites, spinning up cloud services, or acquiring companies—the platform automatically updates discoveries and keeps track of new potential entry points.
303
+
As your organization grows-launching new websites, spinning up cloud services, or acquiring companies-the platform automatically updates discoveries and keeps track of new potential entry points.
0 commit comments