---

name: "Domain WHOIS Lookup" description: "Domain registration information and ownership investigation" allowed-tools:

• src.tools.domain_whois

---

Domain WHOIS Lookup

Purpose

Investigate domain registration information, ownership details, and technical data for due diligence, fraud investigation, and cyber threat analysis.

When to Use

• Website ownership verification and investigation
• Fraud investigation involving suspicious websites
• Cyber threat intelligence and phishing analysis
• Due diligence on online businesses and platforms
• Investigation of domain squatting or trademark infringement
• Analysis of website legitimacy and credibility
• Technical investigation for cybersecurity incidents
• Compliance screening for online service providers

How to Use

The domain WHOIS tool provides comprehensive domain intelligence:

• Registration Data: Domain creation, expiration, last update dates
• Registrant Information: Owner name, organization, contact details
• Technical Contacts: Administrative and technical contact information
• Registrar Details: Domain registrar, registration policies
• DNS Information: Name servers, hosting provider indicators
• Historical Data: Previous ownership, registration changes

Examples

Website legitimacy check:

CopyDomain: newfinancialservices.com
Investigation: Registered 2 weeks ago, privacy protection enabled
Red flags: Recent registration, no business address, temporary email
Assessment: High risk - likely fraudulent financial services site

Business verification:

CopyCompany Website: abccorporation.com
Analysis: Registered 5 years ago, matches business formation date
Owner: ABC Corporation with verified business address
Assessment: Legitimate business domain with consistent registration

Phishing investigation:

CopySuspicious Domain: paypaI-secure.com (note capital i)
Analysis: Typosquatting of PayPal, registered yesterday
Owner: Anonymous registration, bulletproof hosting
Evidence: Clear phishing attempt targeting PayPal users

Trademark investigation:

CopyDomain: famousbrand-outlet.com
Investigation: Uses trademark without authorization
Owner: Offshore registration with privacy protection
Analysis: Potential trademark infringement and counterfeit goods

Important Notes

• WHOIS data accuracy varies - many registrations use privacy protection
• Historical WHOIS data may provide more information than current records
• Some ccTLD (country code) domains have different disclosure rules
• Privacy/proxy services can obscure true ownership information
• Cross-reference domain data with website content and hosting information
• Consider domain age in assessing website legitimacy
• Be aware of GDPR impact on WHOIS data availability in Europe
• Technical contacts may differ from actual website owners/operators
• Use multiple WHOIS databases for comprehensive information