Blog | G5 Cyber Security

Find Addresses from Whois Data

TL;DR

It’s possible to find addresses linked to domain registrations using Whois data, even without knowing the specific domain name. This involves searching Whois databases for contact details and then using those details in search engines like Google or dedicated people-search tools.

How to Find Addresses from Whois Data

  1. Understand Whois Data: Whois is a public database containing registration information for domain names. This includes registrant name, address, email, phone number, and administrative/technical contact details. However, privacy protection services often mask this data.
  2. Access a Whois Lookup Tool: Several free online tools allow you to query Whois databases. Some popular options include:
  3. Search for Contact Details: Instead of searching with a domain name, you can try searching using known contact details (e.g., email address or phone number). Some Whois tools allow reverse lookups.

    Note: Many Whois databases don’t support direct reverse searches by email or phone.

  4. Use Google Search: Once you have a name and potentially an email/phone, use Google to find associated addresses.
    • Exact Name Match: Enclose the full name in quotation marks (e.g., “John Smith”).
    • Email Address Search: Search for the email address directly (e.g., john.smith@example.com).
    • Phone Number Search: Search for the phone number (e.g., 01234 567890). Try different formats, including international codes if applicable.
  5. Utilize People-Search Tools: Dedicated people-search websites can provide more detailed information than Google.
  6. Check Social Media: Search for the name on social media platforms like LinkedIn, Facebook, and Twitter. These profiles often contain location information.
  7. Review Public Records: In some countries, public records databases (e.g., company registers) may contain address details associated with domain registrants.
  8. Be Aware of Privacy Protection: If the Whois data is protected by a privacy service, you will likely only see the contact information for the privacy provider, not the actual registrant. In these cases, finding the original address becomes much more difficult.

Example

Let’s say you find an email address admin@examplehosting.com in a Whois record. You can then search Google for:

"admin@examplehosting.com"

This might reveal the company name and potentially their registered office address.

Important Considerations

Exit mobile version