Signalhouse and Chainscope checks in a case

ObscurIQ runs the same usefulweb.site tools as two other premium apps: Signalhouse (domains, mail, routing, certificates, outages, page changes) and Chainscope (transactions, bridges, wallets, contracts). Use the checks inside a case when you need a quick answer, and continue in the other app when a domain or address deserves a deeper look. Nothing runs on its own: every check starts with your click.

This tutorial uses the example Look-alike login domain (File → Templates…).

1. Run one check

Open the Pivots tab and paste example.com into Value to pivot on. The card Lookups with usefulweb.site tools groups the checks that fit the value:

• Domain, web and mail checks — Domain history, DNS and certificate, Mail security, Certificate transparency, Scam signals and Look-alike characters. For a URL there are also Archive changes and Live page vs. last archived copy.
• Hosting and network checks — Hosting network (BGP), Network neighbours (AS) and Outage signals.
• Blockchain checks — for a 0x transaction hash or an Ethereum-style address (see step 4).

Under each check ObscurIQ says who receives the value — for example that Mail security only queries public DNS, while Outage signals probes the domain once. Press Run lookup next to Mail security. The result shows a summary, key figures and tables.

Some checks build on an earlier one. Hosting network (BGP) needs the domain's IP address, so it runs DNS and certificate first if that has not run yet; Network neighbours (AS) uses the network found by the routing check, and Live page vs. last archived copy compares the page with the newest copy found by Archive changes. The result then says Input taken from the earlier lookup: with the address, network or archived copy it used.

2. Record results in the research log

Press Add result to the log. ObscurIQ adds a note with the summary, the key figures, the most important findings, the tool page and the time the check ran, tagged #lookup and #signalhouse (or #chainscope). The note is timestamped like every other entry, so the log shows when you checked what.

3. Run several checks in one go

Tick the checks you want — for example DNS and certificate, Mail security and Network neighbours (AS) — and press Run the 3 ticked lookups. They run one after another and are paced to stay within the tool API's rate limit; while one runs, the card shows Lookup 1 of 3: … and Stop after the current lookup. With Record each result of the combined run in the research log ticked (the default), every result lands in the log as a note. If a public source does not answer, ObscurIQ tries once more after a pause and then explains what went wrong.

You can also start from the log: More actions → Run lookups on this value… opens the pivot desk with the entry's value, focused on the checks.

4. Blockchain checks

Paste 0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48. A format check cannot tell which chain an address belongs to, so pick it under Chain for the blockchain checks (Ethereum, Base, Arbitrum, Optimism, Polygon, Avalanche or BNB Chain). For an address ObscurIQ offers Wallet permissions, Contract relationships, Contract upgradeability and Smart-account activity (ERC-4337); for a 0x transaction hash Decode transaction, Cross-chain hops, Bridge transfer and Smart-account activity (ERC-4337). They read public nodes; no wallet is connected. No lookup reads Bitcoin data — use the explorer links for Bitcoin addresses.

5. Continue in Signalhouse or Chainscope

Below the checks, Continue in another app offers Open in Signalhouse for a domain, URL or e-mail address and Open in Chainscope for an Ethereum-style address or transaction hash. For the whole case, open the Indicators tab: Open the case’s … domains in Signalhouse and Open the case’s … addresses and hashes in Chainscope collect every domain (IP addresses stay in ObscurIQ) or every EVM address and hash. The same items are in the Export menu, and More actions of a log entry offers them for a single value.

The other app opens in a new tab, in this browser: Signalhouse shows its Add targets dialog and Chainscope its Add addresses and hashes dialog, pre-filled. Nothing is uploaded, and nothing is checked there until you confirm and run it. With pivot recording switched on (File → Workspace settings…), ObscurIQ records a Handed over to Signalhouse entry in the log.

6. Bring findings back as evidence

In Signalhouse, Export → Send targets and findings to ObscurIQ… sends its targets, check summaries and findings; in Chainscope, Export → Send addresses and findings to ObscurIQ… sends the address book and findings. ObscurIQ opens Add evidence from Signalhouse (or Chainscope) for the active case:

• Indicators — the domains, URLs, addresses and hashes; values already in the case are marked already in this case.
• Findings — each with its severity and check; info findings are not ticked by default.
• Check results — one note per Signalhouse target with the summary of every check.

Untick what you do not need, adjust Tags for the new entries and press Add to the case. A message says how many indicators, findings and result notes were added; Undo removes them in one step. Findings are what the other app reported — review them before you rely on them.

Back to the basics: Pivots and lookups.