Quaesitor Suite: Fraud Investigation

Fraud & phishing investigation suite: UA spoofing, redirect chains, evidence annotation, registration intel, and takedown autofill.

Quaesitor Suite is a single workspace for domain abuse investigation, from first look at a suspicious site through to filing the takedown report. Investigating a phishing or fraud domain means repeating the same sequence: check how the site behaves for different visitors, trace where its links actually lead, capture what you saw, find out who to report it to, and then fill in that registrar's abuse form. Doing this across separate tools and browser tabs means copying values by hand between them, and losing the thread of which domain you were on. Quaesitor keeps all five stages in one side panel, sharing a single case context so what you find in one stage is available to the next. Facies views a site as a different client. Apply a device profile and the tab reports a matching user agent, viewport, pixel ratio and touch capability, so you see the mobile variant of a page rather than assuming there isn't one. Also opens batches of URLs at once. Vestigia traces redirect chains hop by hop, recording each step rather than only the final destination. Signum captures and annotates evidence, producing a bundle with a manifest recording how and when each capture was taken. Tabularium runs RDAP registration lookups and surfaces the contact details you need to file a report, showing the relevant fields first rather than a full record to scan by eye. Libellus fills registrar and host abuse forms from reusable templates and keyword-driven values, so the same details do not get retyped for every report. Your data stays on your machine. No account, no server, no telemetry, no analytics. Templates, brand profiles and captures live in the browser's own extension storage. The only outbound requests are RDAP and DNS lookups you explicitly run, and those are documented in the privacy policy at quaesitor.dev/privacy. Quaesitor requests broad host access and the debugger permission because it operates on sites that are only known at the moment you investigate them. Each permission and its purpose is listed in full at {https://quaesitor.dev/privacy/}. Free. Built by a working brand protection analyst.