Fraud & phishing investigation suite: UA spoofing, redirect chains, evidence annotation, registration intel, and takedown autofill.
Users
18
+4 in 30 days
Rating
4.0 / 5
unchanged in 30 days
Ratings
1
0 in 30 days
Store rank
#161K
#134K among extensions
Version
2.0.0
updated 12 Oct 2026
Users
monthly, 2 months
Latest, 21 Oct 2026:18 usersMove the mouse over the chart for any month
Ratings count
monthly, 2 months
Latest, 21 Oct 2026:1 ratingsMove the mouse over the chart for any month
The Chrome Web Store rounds user counts down to the leading digit, so the user line moves in steps. The ratings count is exact and is the better signal of real adoption.
About Quaesitor Suite: Fraud Investigation
Quaesitor Suite is a single workspace for domain abuse investigation, from first look at a suspicious site through to filing the takedown report.
Investigating a phishing or fraud domain means repeating the same sequence: check how the site behaves for different visitors, trace where its links actually lead, capture what you saw, find out who to report it to, and then fill in that registrar's abuse form. Doing this across separate tools and browser tabs means copying values by hand between them, and losing the thread of which domain you were on.
Quaesitor keeps all five stages in one side panel, sharing a single case context so what you find in one stage is available to the next.
Facies views a site as a different client. Apply a device profile and the tab reports a matching user agent, viewport, pixel ratio and touch capability, so you see the mobile variant of a page rather than assuming there isn't one. Also opens batches of URLs at once.
Vestigia traces redirect chains hop by hop, recording each step rather than only the final destination.
Signum captures and annotates evidence, producing a bundle with a manifest recording how and when each capture was taken.
Tabularium runs RDAP registration lookups and surfaces the contact details you need to file a report, showing the relevant fields first rather than a full record to scan by eye.
Libellus fills registrar and host abuse forms from reusable templates and keyword-driven values, so the same details do not get retyped for every report.
Your data stays on your machine. No account, no server, no telemetry, no analytics. Templates, brand profiles and captures live in the browser's own extension storage. The only outbound requests are RDAP and DNS lookups you explicitly run, and those are documented in the privacy policy at quaesitor.dev/privacy.
Quaesitor requests broad host access and the debugger permission because it operates on sites that are only known at the moment you investigate them. Each permission and its purpose is listed in full at {https://quaesitor.dev/privacy/}.
Free. Built by a working brand protection analyst.