Infrastructure Pivot
Start with one asset. Follow the connections to the infrastructure around it.
You can also start from a favicon hash or tracking ID.
Try a starting point
Illustrative excerpt: debian.org connects to debian.net and dpkg.org through shared nameservers, and to debian.com and debconf.org through a shared registrant.