Find Out Domain Registration Info and IP Block Owned

Objectives:

  1. Determine iprange of target(s)
  2. Determine nameservers of target(s)
  3. Determine ASnumber or target(s)
  4. Determine registrar of target (provider)
  5. Determine address information of Registrar
  6. Identify administrative contacts
  7. Collect telephone numbers
  8. Gather Emailaddresses

Tools:

Linux:

# whois <domainname of target>
 
# whois <ipaddress of target>
# whois <domainname of ISP>
 
# whois <ipaddress of ISP>

You should perform advanced whois searches by using the attributes values you collected in the basic search.

# whois -i nserver <nameserver>
 
# whois -i admin-c <admin contact>

Online Tools:

References: