.br

A foundational OSINT technique is examining a domain's registration information using WHOIS or RDAP lookup services.

For example, domains can be investigated through Registro.br, while domains can be researched using ICANN-related domain lookup tools.

If a website claims an auction house has operated for twenty years but its domain was registered three weeks ago, that discrepancy is a major warning sign.

Research on cybercrime infrastructure shows that threat actors frequently register newly created domains for short-lived phishing and scam campaigns.