NetTool helps small businesses and IT/security teams investigate internet-facing domains and possible brand impersonation. It combines passive DNS, Certificate Transparency, RDAP, and public blocklist and reputation context to surface lookalike-domain leads, monitor owned domains and investigate suspicious domains, IPs, URLs, email addresses and usernames. Active web inspection requires explicit user consent. Findings are evidence for human review, not proof that a domain is malicious. NetTool is in public beta.