SyncGTM logo
All enrichments & signals

Reverse IP Lookup

Find all domains hosted on the same IP address as a company's website.

Key Takeaway

Reverse IP Lookup extracts structured professional data from any LinkedIn profile URL — including headline, experience, education, skills, and certifications — at 1 credit per run. It is part of SyncGTM's 75+ enrichment library and is available via CLI and MCP.

What is Reverse IP Lookup Action?

Reverse IP Lookup is a network intelligence action that finds all domains hosted on the same IP address as a given company's website. Given a domain, it resolves the IP address and returns a list of all other domains sharing that same server. This action is useful for understanding a company's hosting infrastructure, identifying related properties, and conducting security research.

Reverse IP lookups reveal the hosting footprint of a company and can uncover related domains, subsidiaries, or shared hosting environments. SyncGTM's Reverse IP Lookup action queries DNS and hosting databases to map the complete set of domains on a given IP address. This data is valuable for security teams conducting reconnaissance, sales teams identifying related company properties, and researchers mapping corporate infrastructure.

This action uses waterfall enrichment to query multiple premium data providers in sequence, delivering higher match rates than single-source alternatives. Learn more about how waterfall enrichment works.

How it works

  1. 1

    Provide a domain name as input.

  2. 2

    SyncGTM resolves the domain's IP address via DNS lookup.

  3. 3

    A reverse DNS query identifies all other domains hosted on that IP address.

  4. 4

    The IP address and a list of co-hosted domains are returned.

Use cases

Infrastructure Analysis

Understand a company's hosting setup by seeing what other domains share their IP. Identify whether they use dedicated hosting, shared hosting, or a CDN.

Related Property Discovery

Discover related company domains, microsites, or subsidiary websites that share the same hosting infrastructure.

Security Research

Identify all domains on a server for security audits. If one domain on a shared IP is compromised, others may be at risk.

Input

FieldTypeRequiredDescription
domainstringYesThe domain to perform a reverse IP lookup on (e.g., acme.com).

Output

FieldTypeDescription
domainstringThe queried domain.
ip_addressstringThe resolved IP address.
total_domainsnumberTotal number of domains on this IP.
co_hosted_domainsarrayList of other domains hosted on the same IP.

Related enrichments

Explore more

Frequently asked questions

What data does Reverse IP Lookup return?

How many credits does it cost?

Can I use this via MCP?

Ready to enrich company data with Reverse IP Lookup?