untangling_the_web

DOClD: 4046925
UNCLASSIFIEDNFOR OFF'lel~L US! ONLY
Look for Additional Domains in Whois Database
As an example, Kaspersky Labs owns and operates websites under the domain
names kaspersky-Iabs and avp (for Anti-Virus Protection) for many country top-level
domains as well as the .com and .net domains. How did I find these alternate
domain names and websites? By investigating Whois data on Kaspersky Labs and
noting email addresses@avp.ruandotherservernames(kaspersky.com.
kasperskylabs.net, kaspersky-Iabs. com ).
Correlate Whois Data
For example, when you find a person's name (the person object is the technical or
administrative contact for a Whois entry), I suggest you search on that name in all
the major Whois databases to see if his/her name shows up anywhere else, thus
providing possible leads to relationships between seemingly unrelated companies or
organizations. To see how this works, search on the name [vladimir] in the RIPE,
ARIN, and APNle databases at IP-Plus:
SE RVICES OPTIONS O UR NET WORK TECHNICAL INFO !ffiD' CUSTOME R CARE
. :(.1 " @4 "S'I:t o z 11$, JfUi o ' · II Whl j" " 1 3.1 "i, M. ib'4A"Mi- e'lrow' U·j j Gfi3:" P V''''''ijl 1 ir-'''' h P
s ~ l ncp~
solu tic ns
• S H o n d a ~ ' DUS
+ Che d