WHOIS hunting for domain

The following procedure tells you how to create a tracking rule for a regular WHOIS search for a domain.

To create a tracking rule for regular WHOIS search for a domain:

  1. Open the WHOIS Hunting page (WHOIS Tracking (WHOIS icon.) → WHOIS Hunting), and then select the Domain tab.

    Required and optional fields will be displayed.

  2. In the Rule name field, specify a name for the tracking rule.

    A rule name must be unique.

  3. Select the Notifications enabled check box and specify an email address if you want to receive email notifications when new information appears about the tracking rule.
  4. Specify the priority of a tracking rule:
    • Select Normal available to specify standard priority. Kaspersky Threat Intelligence Portal will run a WHOIS search hourly. Quota for tracking rules with standard priority is specified in your contract with Kaspersky.
    • Select High available to specify high priority. Kaspersky Threat Intelligence Portal will run a WHOIS search hourly. Quota for tracking rules with high priority is specified in your contract with Kaspersky.

      In future Kaspersky Threat Intelligence Portal versions, the search interval for rules with high priority may be decreased.

    The number of available/all tracking rules is displayed for all Kaspersky Threat Intelligence Portal users in your group.

  5. Fill in at least one of the required fields:
    • Domain—Domain you want to investigate.

      You can use special search characters (such as *, ~, and ^).

      Advanced searches can be performed only for ASCII domain names. A search for internationalized domain names (IDNs) may be proceeded incorrectly.

    • Contact—Name, email address, or organization name of any of the contacts (registrant, administrative, technical, billing, or zone) to which the domain belongs. Searches are word-based and case-insensitive.

      You can perform different types of searches.

    • Name server—Name server for the domain you want to investigate.

      For name servers, the same types of search are possible as for domain names: exact matching, substring matching, and approximate string matching.

  6. If necessary, specify the following fields in the Advanced options section:
    • Information checked date (range)—Date when the information about the domain was last updated in Kaspersky expert systems.
    • Creation date (range)—Period of time when the domain was created.
    • Expiration date (range)—Period of time when the domain expires.
    • Updated date (range)—Period of time when information about the domain was updated in the registry.
  7. Click the Create tracking rule button.

Kaspersky Threat Intelligence Portal will create a tracking rule for a domain.

Page top