WHOIS

So they're covering some of the things that they're gonna talk about here.

Of course, information gathering, they're gonna do some OSINT tools, basic things like analyzing DNS, Whois records, network scanning, Nmap for Linux, Okay, so basic stuff so far.

Vulnerability scanning analysis, OWASP Zap, Nikto.

We've covered a lot of that on our channel already.

Whoever registered it.

So if you go to Whois, I got it.

But the other thing is to do the other play.

Register everything else around it.

Passive DNS and DNS history show what resolved to what and when.

Whois and Whois history show who registered a domain and how they tried to hide their identity.

Subdomains, SSL certificates, services, components, trackers, and cookies each add another thread.

Then there are host pairs, which show connections between websites based on what one page loads from another, a relationship that passive DNS and Y-trees would never surface on their own.

So that's great.

But at the same time, we also have responsibility over critical infrastructure that we use, health organizations, organizations that maybe don't have the same access they have with WHOIS today, they don't even know what's their attack surface, and the ability to really leverage the red agent in a setup that is scan for good, that secures our foundations as a society, right? The ability to apply the red agent at scale and provide findings to the teams that actually can now be ahead of the attackers and have the first mover's advantage and fix it before the AI-powered threats find them in a way.

I think this is an amazing example of how we can scale what we did at Wiz and provide, I almost see it like a sheltering umbrella, right, on organizations that are critical to us.

And this is one example.

Whoever registered it.

So if you go to Whois, I got it.

But the other thing is to do the other play.

Register everything else around it.

It...

And then the other thing I wanted to ask you about is WHOIS.

So I'm seeing a couple different things in WHOIS.

I'm either seeing just the registrant name and email, or I'm seeing the registrant, like, all the details, like an address.

And tell me what's happening there.

somebody.

Some of the advice they gave included, you can look at a source like Whois, which is a domain lookup and say, who's actually owns this domain? You can kind of, but it really, what it is, is, is this too good to be true? Yeah.

And you have to think, is this does this look right? And then, you know, make sure you get a trusted third party to check in on this.

But it's it is very difficult.

Three, investigate the domain registration history.

A foundational OSINT technique is examining a domain's registration information using WHOIS or RDAP lookup services.

For example, domains can be investigated through Registro.br, while domains can be researched using ICANN-related domain lookup tools.

If a website claims an auction house has operated for twenty years but its domain was registered three weeks ago, that discrepancy is a major warning sign.