The Investigate WHOIS Email view displays the WHOIS information for an email address. The WHOIS information for a domain enables you to find additional domains related to a certain domain. For instance, if you search for a domain that is flagged as malicious, you can locate other domains that are registered with the same email address, or with the same nameserver.
To get started, enter an email address in the Investigate Smart Search. If you begin your search from a Domain view, follow the links to the email information from the WHOIS record data. Searching for an email address directly returns all domains that are associated with an email address as a domain registrant.
- A minimum of Investigate Only access to the Umbrella dashboard. See Manage the Investigate Only User Role.
Click on the email address or the number of the Associated Domains to view the domains associated with the email address.
Note: Umbrella Investigate lists no more than 500 domains associated with an email address.
The WHOIS Email view displays a list of the malicious domains, security categories, content categories, and an indicator of when the domain was last observed. Investigate categorizes when a domain was last observed as: Current or Past. Investigate displays Current if the domain currently belongs to the email address and Past if the domain once belonged to the email address.
Click the link to the domain name to display the Domain view for the domain.
Updated over 1 year ago