Find domains related to any target through shared infrastructure — same IP, SSL certificates, mail servers, and nameservers. Essential for reconnaissance, brand protection, and vendor assessment.