IT Security Stack Exchange
IT Security Stack Exchange

Questions tagged [whois]

WHOIS is a query and response protocol that is widely used for querying databases that store the registered users or assignees of an Internet resource, such as a domain name, an IP address block, or an autonomous system, but is also used for a wider range of other information.

27 questions
31
votes
6 answers

Is pinging a website essentially the same as visiting the website through a browser?

I was looking at the domain information of a website (poaulpos.net) on who.is that Chrome connects to whenever I visit a specific an old Tech Times article about Thunderstrike 2, a Mac firmware attack ("Thunderstrike 2 Is The Latest Nightmare Of Mac…
oats58459
  • 531
  • 1
  • 4
  • 5
23
votes
4 answers

More than three domains hosted on the same IP address

Not on purpose I did a reverse IP address look up on my site, and it shows that there are three other websites hosted on my server, and now I'm worried. My web is arturofm.com, and here is the…
Arturo
  • 363
  • 3
  • 8
21
votes
2 answers

Can address details be "googled" from the whois information, without knowing the domain name?

As above - if I register a domain name, will my postal address become "googleable" via WHOIS by someone that doesn't know what the domain name is? (Say I have a fairly distinctive first and last name)
user47059
  • 355
  • 2
  • 7
5
votes
1 answer

Is this email from OneDrive a phishing attack?

Today I received an email claiming that my OneDrive account is going to be deleted as it has been unused for the past two years. This is probably true. The email urges me to visit OneDrive to reactivate my account before a date roughly 3 months from…
Kelly Bang
  • 179
  • 1
  • 1
  • 7
5
votes
1 answer

Is unused before domains' whois info being scraped automatically on registration?

Suppose registrant's whois details go public (can be retrieved with whois) for a relatively short amount of time (less than hour) after domain registration, before being redacted or hidden with a privacy service/registrar function. Should this…
Ivan
  • 183
  • 1
  • 5
5
votes
2 answers

How much can I trust domain registrars to honor Whois identity protection services?

Domain name registrars offer whois ID protection services. I do plan to use such a service. But as I'm a relative newbie to the domain name registration world, I don't know whether I can trust it. I'm trying to decide whether it is worth risking…
user541686
  • 2,502
  • 2
  • 21
  • 28
3
votes
1 answer

Which Extensible Provisioning Protocol (EPP) status-values provide sufficient protection against domain hijacking?

The Extensible Provisioning Protocol (EPP) as described in RFC 5730, can possibly be protective against domain hijacked. The protocol consists of the 17 following status-values as described in RFC 5731: clientDeleteProhibited,…
Bob Ortiz
  • 6,234
  • 8
  • 43
  • 90
3
votes
2 answers

How can I search for registered domains, but not unregistered domains?

There are many many services available to "search for domain names", but every one I have found returns results for unregistered domains; whereas I would like to a wildcard search for registered domains. The purpose of my quest is to identify…
Anonymous
  • 31
  • 1
3
votes
2 answers

relationship between anti-spam solutions and whois databases

Are there anti-spam SMTP proxies(like ASSP, qpsmtpd) or e-mail spam filtering solutions in general(like SpamAssassin) out there which create for example block filters based on objects in RIR databases? If yes, then which objects(inetnum? route?) do…
Martin
  • 361
  • 2
  • 8
  • 16
2
votes
2 answers

How can you hide the usage of an external VPN?

Let's assume we need a VPN to access some site, e.g. for bypassing geo-blocks. But those site doesn't want VPN users. A good example is Netflix. However, I don't want to specify this just on Netflix, since there are other services blocking VPNs as…
Lion
  • 121
  • 2
2
votes
4 answers

How can I use WHOIS data for security purposes?

I’m a small business owner and it’s my first time giving a WHOIS database download service a try. I’ve seen what details are shown in the records and I heard that WHOIS information can be used not only to learn domains owners’ contact information…
Anna Danilova
  • 21
  • 1
2
votes
0 answers

Filter out ISPs from Whois results

I was wondering if there is any efficient way or any service (free or not) that may help me in order to identify companies behind IP addresses. I figured out that in some cases Whois may be really helpful for that. Unfortunately, in a lot of cases…
Theo Babilon
  • 121
  • 2
2
votes
1 answer

Blocking brute forcer with multiple IPs in range

A few weeks ago, I allowed my Linux Server to be connected from the internet for development purposes. My networking knowledge is quite basic. Following some guidelines on securing Linux servers, I have installed Fail2Ban and I also disabled root…
user118989
1
vote
1 answer

are some IP whois capable of going beyond proxies?

I received a suspicious email (suspicious body) coming from a legit person. The headers always show the legit adress as if the person in question has been hacked. But I wanted to go further and checked for the originating IP. In my first whois query…
k1ngstr
  • 11
  • 1
1
vote
4 answers

Difference between whois of a hostname and an IP

I was reading through No Starch's Metasploit book when I came across a segment which showed the results of running the 'whois' command on a hostname and then on it's corresponding IP only to yield different results. > whois secmaniac.net [*] exec:…
Izy-
  • 853
  • 1
  • 8
  • 17
1
2