: You can infer much by just looking at the domain's DNS records: C:>nslookup www.example.org Server: google-public-dns-a.google.com Address: 8.8.8.8 Non-authoritative answer: Name: www.example.org

@Hamaas447

You can infer much by just looking at the domain's DNS records:

C:>nslookup example.org Server: google-public-dns-a.google.com
Address: 8.8.8.8

Non-authoritative answer:
Name: example.org Address: 123.45.67.89

C:>nslookup -type=ptr 123.45.67.89
Server: google-public-dns-a.google.com
Address: 8.8.8.8

Non-authoritative answer:
89.67.45.123.in-addr.arpa name = member9876.members.hostingcompany.com


First, use nslookup to find the site's IP address. Then, use the IP address to get any PTR records (reverse DNS.) Often, one (or the only) PTR record will show the hosting company's domain name (in the above example, we see that example.org is another name for member9876.members.hostingcompany.com.)

Vote Up Vote Down

Login to post a comment!