Who owns this domain Registration data tells you who bought the name; DNS tells you who runs the service. They are frequently different parties, and conflating them is the mistake that wrecks attribution. Everything here is passive except where flagged — but note that aimed at the target's own nameservers lands in the target's query logs, so resolve through a public recursive resolver or passive DNS when you care about being quiet. Which source first | You hold | Reach for | Why | |---|---|---| | A domain, nothing else | RDAP, then registrar WHOIS | Structured, gives dates + registrar + statu…