How to check when a domain is registered. Spy games or how to find out the owner of a domain. Reading comments in the source code

In this article I will describe all the currently relevant methods for determining the domain owner. I want to warn you right away that there is no one hundred percent chance that we will accurately determine the domain owner. This is due to the fact that some webmasters indicate fake (erroneous) data about themselves when registering domains - nothing can be done about this. I can only say that such people are a minority, which means that there are more chances to find an owner than not to find it.

The domain owner can be determined in several ways. Let's consider each of them in detail:

1. Through Whois data

This is by far the easiest and most reliable way (see what Whois is). At the same time, probably everyone knows about him or at least heard about him. There are quite a few services that give complete data about the domain, and I would not be surprised if you know an even more convenient service than I will suggest below. I would suggest using the following sites to determine Whois:

For example:

After obtaining Whois data, you should pay attention to the "Domain Administrator" column (sometimes it is called person). It is in it that the full name of the domain owner is contained. If there is a Private Person in this column, it means that the owner of the domain decided to remain anonymous. This can be done by enabling the Private Person option in the domain properties, which hides the full name. However, in this case, there is a way to calculate it. I offer two ways to do this:

a) If you know the e-mail, then there is a possibility of finding the owner through this data. To do this, enter the service http://2ip.ru/domain-list-by-email/, enter the address mailbox and he gives you all the domains of this person. Perhaps, in some domains, the Private Person option will be disabled and in this indirect way you can determine the owner.

b) View the history of the domain. I advise using the following imp paid services that allow you to do this:

  • http://who.is/ (does not show the whole history, but only from 2011-2012)
  • http://whoishistory.ru/ (also works with .rf domains, but you need authorization to work)
  • http://whoistory.com/ (works only with ..ru domains, excellent service, below is a screenshot from this service)

For example:

Finally, I want to say that if using all of the above methods did not suit you, then, for example, in reg.ru there is an opportunity for a fee to find out the whole history of the domain owners (if the domain changed its owner). To be honest, I have never used such a service, so I cannot say anything about its effectiveness. By the way, many registrars have paid services for determining the owner.

All the remaining methods will be listed below, or rather the signs by which you can at least learn something about the domain owner. However, the chances of success are much less than the considered method of determination through Whois.

2. Via WebArchive

Visit the WebArchive website: http://archive.org/web/web.php. Type the site you need into the search and watch the story. If it is, then try to find some contacts on the site. Perhaps they have a clue or at least something useful in your case.

For example:

3. Try to contact the domain owner

I see only two ways to contact the owner:
a) either write a letter to the address indicated in whois (but it may not be indicated);
b) either write to the address: [email protected] DOMAIN.

By the way, if you do not know where to write, then try to search through some search engine for the following phrase: "@ DOMAIN". Perhaps, somewhere in the index there is information about the valid postal addresses of this domain.

In extreme cases, you can call by phone if it is on the site (or on other sites of this owner) or in Whois.

Finally, I want to tell you about one interesting service that allows you to determine all sites of one owner (though only in the domain zones.ru ir.rf). This can be done on the website: http://2ip.ru/domain-list-by-email/.

For example:

Another manual for novice scouts.

Domain owner information is confidential and is provided by the registrar only at the request of the authorities. But there are several possible ways to ferret out her. We will talk about them in this article.

Why is it needed: find justice for the person who brazenly steals your content, assess the paying ability of the site owner before making him an offer to buy, find a specialist in a narrow field who writes sensible articles for his blog, but subscribes with an impersonal nickname, etc.

1. See whois history

It's worth starting with checking the site for who.is... The screenshot shows an example when, with the help of this service, not only email became known, but also mobile phone and the owner's address (this happens if you're very lucky). I'm shocked by my hoster's privacy policy! In most cases, only a link is displayed where you can send a message to the domain owner through the registrar. And with its help there is a chance to learn a lot of interesting things.

2. We are trying to contact him in an official way

The result depends on luck. It is not known whether a person checks the mail that he indicated during domain registration and how reliable the data was provided to them. Your social engineering skills are also important. You can offer investments, introduce yourself as Yuri Milner's assistant :-), convince you that you need to call by phone or Skype, ask about the possibility of a personal meeting. The main thing is to convince a person that fate gave him a real chance to earn money and solicit the maximum amount of data that can be used in further exploration.

It is advisable to add the phrase: "Please let me know that you are not interested in the proposal." This increases the chance that a polite person will drop a few lines, highlighting their mail, name and IP address.

Knowing the e-mail of the former owner (and his nickname), you can find his announcement of the sale of the site / domain on a specialized forum and a list of users who responded to it. From these, you can compose a circle of possible current domain owners.

3. We are looking for sites registered in the name of the owner

Knowing the address Email person, you can find out what domains are registered for him. You can do this on domainiq.com... It is possible that one of these sites will turn out to be a personal blog, which can be used to identify a person.

4. Contacting the hoster

12. Reading comments in the source code

We go to the site, click Shift + Command + U(or select the item from the menu Show the program code of the page). First, we scan the HTML code for fake comments with names and nicknames. For example: "BigFatNagibator, please check this place!" Along the way, we are looking for js scripts that were written by the site owner specifically for this resource. It is possible that they may contain the solemn inscription “Created by Sasha Petrov. Irkutsk ”and a link to his profile on Github.

Domain registrar is an organization accredited by the zone administrator that provides services for registration and renewal of domain names in a particular zone.

To find out which registrar provided the domain registration service, you need to use the whois service. In accordance with the RFC 1834 standard, the information returned by the whois server necessarily contains information about the registrar in the form unique identifier "Nic-handle"... Information about Nic-handle registrars can usually be found on the sites of zone administrators (for those zones where a distributed registration system operates).

For example, the administrator of national domains .RU and .РФ is non-profit organization Coordination Center national domain the Internet. This organization is responsible for the accreditation of domain name registrars, and also has the authority to develop registration rules. For national domains .RU and .РФ information on all accredited registrars of these zones and the Nic-handle assigned to them is available on the website of the Coordination Center.

For example, the whois server response received on the White Whois site for the domain site:

Checking the information on the website Focal point you can define that Nic-handle REGRU-REG-RIPN belongs to the registrar REG.RU.

To find out the registrar for gTLD domains, you also need to use the whois service. Typically, for such domains, the whois response fields contain all the necessary information about the registrar.

For example, the whois server response from the White Whois site for the site.com domain:

Whois server response received on the White Whois site for the site.biz domain:

List of Nic-Handle identifiers by the largest registrars for .RU and .РФ domains

Domain.RU:

  • RU-CENTER-REG-RIPN - RU-CENTER (Regional Network Information Center CJSC);
  • REGRU-REG-RIPN - LLC "Registrar of domain names REG.RU";
  • R01-REG-RIPN and CENTROHOST-REG-RIPN - HOSTING COMMUNITY (LLC Garant-Park-Telecom and CENTROHOST);
  • REGTIME-REG-RIPN - REGTIME LLC.

Domain.РФ:

  • RUCENTER-REG-RF - RU-CENTER (Regional Network Information Center CJSC);
  • REGRU-REG-RF - Domain Name Registrar REG.RU LLC;
  • R01-REG-RF and CENTROHOST-REG-RF - HOSTING COMMUNITY (LLC Garant-Park-Telecom and CENTROHOST);
  • REGTIME-REG-RF - REGTIME LLC.

Imagine a situation: you came up with an original, memorable address for your website, however Domain name was already taken. At the same time, the current owner of the domain does not deal with it at all, and the lease term will not end soon. The best solution is to contact the current owner of the domain and ask him about the transfer of rights. But how do you know who exactly this owner is, and which registrar owns the domain name? Let's figure it out.

We carefully study the site

The easiest way to contact the owner of a resource is to use the contacts listed on the site. They can be placed in the site header, in the section of the same name, in the "footer" (bottom of the page), as well as in text and graphic blocks placed on it. There is only one problem, if no one monitors the relevance of the information, or the owner has stopped his activities related to the resource, then you will not receive an answer to your appeal.

We use a Whois check service

If it was not possible to contact directly, the next step is to visit sites designed to determine by domain. Today this service is offered free of charge by dozens of services around the world. To get information about the owner and registrar, it will be enough to enter the domain name in search string and click the "Search" button (or its equivalent). In the generated list, we will be interested in the following lines: Registrar (data about the registrar) and "Administrator" (aka Person / Org).

If everything becomes clear with the registrar at this stage, then certain difficulties may arise in determining the identity of the domain owner. If he wishes to remain anonymous (and some registrars provide this opportunity), then instead of contact information in the corresponding fields, Private Person will be indicated. Also, there may be written incorrect or deliberately distorted data, which many owners like to sin, who do not want to "shine" their identity and do not want to overpay to the registrar for privacy. In this case this way will be useless.

Use the contact form with domain administrators .RU, .РФ

To contact the .RU, .РФ domain administrator, there is a link to the contact form with the domain administrator in the Whois-information on the domain name. By writing a message in this form, you can be sure that it will be addressed to the domain owner.

We attract third-party tools

In addition to services that track Whois sites in the global network, you can also find resources that track all domains belonging to one owner. For example, it is enough to enter the address you are interested in on such resources, and you will receive a list of all domains registered to this person. And it is possible for at least one of them that the Private Person function will be disabled.

Remember the classic detective genre about the adventures of detective Holmes? Under the gloomy skies of Foggy Albion, he solved mysteries that were beyond the power of the police. Let's imagine ourselves in his place and try to find out who owns the domain.

Why you need to know who the domain owner is

  • You are about to buy a website. Therefore, you need to know the ins and outs. What if the domain is sold not by its owner, but by a scammer?
  • If you have previously worked with a web studio that registered a name for the site, and then for some reason canceled its services. Accordingly, both the site itself and its name must be transferred under your control. To do this, you need to know where everything "lies".
  • After the registration procedure, you need to check whether the administrator (for example, you) has been specified correctly.
  • If you are starting a business with an unfamiliar web resource, you need to check who owns the domain name and site.
  • If you buy ad space on a third-party web resource, and a hacker can sell it.
  • You ordered a product or service, sent the payment to the site, but did not receive the order.
  • When you become a victim of a scammer (re-registering your domain by fraudulent means, etc.).

In order to check information about the owner of a domain - to whom it is registered - there are several ways.

1. WHOIS

Many online services offer history checking services. Here is an example of a check on the Ru-center website.

In the proposed field, enter the name and click WHOIS.

Owner information is open:

Further example - information is closed:

From the given example, we see the date of registration and release, the hoster, the registrar's contacts (this is the Ru-center), and you can also contact the administrator by clicking on the corresponding link.

You will be taken to the form feedback, through which you can send a message to the admin in Personal Area on the website of the registrar. Unfortunately, in our example, the information about the administrator itself is hidden (as the administrator wishes).

Sometimes you don't need a site name to get the data. You can "punch" web resources by IP. This is a unique address for hosting a website on the Internet. In order to find out on which IP the Internet resource is located, you can use the 2ip online service or other similar ones.

You can also "ping" the IP through your PC connected to the Internet. We select the command "Run" and write in the window "ping domain-site-name".

We get:

When a closed person cannot be identified, but we receive an IP address that can be entered into a WHOIS service, for example, in the Nyrosoft program.

We launch the corresponding application and enter the IP of interest to us.

After that, you will receive information on the IP data.

2. Registrar company

If the person is hidden, then the registrar company always has data on the administrator. The registrar "breaks through" easily using any of the previously described services.

If there is an urgent need, you can contact the registrar company (through government agencies - police, court, etc.), and it will be obliged to provide the data of the domain owner upon an official request. There is one caveat: if the name is registered to a non-existent person, unfortunately, it will not work to identify the real owner.

The registrar's website is always listed in the WHOIS.

Last resort - the most famous Runet registrars

  • Ru-center.
  • P-01.
  • Reg-ru.
  • Gandhi.
  • Reggae.
  • 101domain.
  • WebNames
  • Godeddi and others.

Usually, we start to find out the information about the administrator only when we become victims of scammers. Therefore, before risky deals, check your partners in advance. It is better to spend a few minutes looking for information than to lose money or websites later. And if in doubt about the owner, don't risk it.