Identify domain names and networks
- registrar query. In Linux/UNIX issue whois “domain”@whois.crsnic.net In Windows download SamSpade, enter a DNS server in the right window and perform the query in the left windows as shown here.
- organizational and domain query. Use the dig function of SamSpade to obtain information about who is responsible for the domain, the primary (authoritative) DNS server, the other DNS servers, etc.
- network query. The ARIN database can provide information on IP blocks assigned to an organization. You can also use the SamSpade IP Block tool.
- countermeasures: only administrative cleanup, because the information is required for registration.