Re: Audit Research - WHOIS?

From: Timothy.Lyons@predictive.com
Date: 01/29/02


To: Dee Harrod <dee_harrod@yahoo.com>
From: Timothy.Lyons@predictive.com
Date: Tue, 29 Jan 2002 15:16:03 -0500

Dee,

You might want to try running a whois against the registrant ID.

If NSI is the registrar the you would run the following (once you had a
Registrant ID)
whois -h whois.networksolutions.com '!REGISTRANT_ID-HERE'

GANDI would be whois.gandi.com ... etc...

I believe some registrars also allow you to run reports from their Web
Interface.

HTH

--Tim

Dee Harrod <dee_harrod@yahoo.com>
01/29/2002 14:24

 
        To: Cavell.McDermott@apw.com
        cc: security-basics@securityfocus.com
        Subject: Re: Audit Research - WHOIS?

True enough. This is for auditing purposes, though,
and I'm trying to approach it as a hacker would - not
using insider information. I've found a number of
domains that point back to us, but I'd like to find
all of them. Thanks, though.

-- DS



Relevant Pages

  • Re: ENOUGH IS ENOUGH!
    ... Below is some registrant info on our favorite ... WHOIS information for: royalsupplier.com: ... sonyecvv sonyecvv 505174...@xxxxxx ...
    (rec.games.video.arcade.collecting)
  • ENOUGH IS ENOUGH!
    ... Below is some registrant info on our favorite ... WHOIS information for: royalsupplier.com: ... sonyecvv sonyecvv 505174048@xxxxxx ...
    (rec.games.video.arcade.collecting)
  • Re: OTish Anonymous Domain Registration
    ... my home address and mobile number and obviously this info is available ... I was thinking of changing to an anonymous domain reg service ... Your name will still appear on whois sites but all other details will be ... The registrant is a non-trading individual who has opted to have their ...
    (uk.telecom.broadband)
  • Re: [Full-disclosure] AntiSec Lamers Exposed
    ... criminal charge. ... Original whois before whois privacy for copyandpaste.info ... Registrant Street1:2-197 Glebe Avenue ... Administrator, DNS nnsjoey@xxxxxxxxxxxx ...
    (Full-Disclosure)
  • Re: Michael JIMMYJUMP Dimou loses his hate-site www.greekplanet.com.au
    ... You are getting scared asshole Sean Ruttledge. ... Racial hatemongering websitehttp://www.greekplanet.com.auhasbeen ... The registrant is a non-trading individual who has opted to have ... address omitted from the WHOIS service. ...
    (soc.culture.greek)