loading
Loading content
loading
Recon
Forward WHOIS for a hostname through RIPE.net.
overview
Hand it one hostname; Trickest runs the RIPE.net WHOIS query and writes the response as a file the next stage can read. No extra flags to tune.
Use it when the asset sits in RIPE's region and you need registry allocation data (inetnum, netname, org) rather than a generic mirror.
Compared with whoisninja, this is forward lookup on a single host, not reverse pivot by org or email. Feed ownership into asnmap or reverse-WHOIS next.
use cases
Query a hostname through RIPE to recover the registered netblock owner and contact handles, confirming an asset belongs to the target before you scope further work.
Resolve the inetnum record that contains a hostname so you can read the netname, org, and country for the allocation and pivot from one asset to the surrounding range.
Pull the org and maintainer fields, then feed them into a reverse-WHOIS tool to find sibling domains and networks registered under the same entity.
Run the lookup across discovered hosts to attach registry ownership records to each one, turning a flat host list into an attributed inventory for OSINT triage.
reference
| Name | Type | Flag | Description |
|---|---|---|---|
| hostname | STRING | · | Hostname to look up WHOIS and network-ownership records for through RIPE.net. |
Showing key inputs. whois-with-ripe exposes 1 inputs in total.
example
# look up a host's WHOIS and network-ownership record through RIPE.netwhois-with-ripe example.cominetnum: 198.51.100.0 - 198.51.100.255netname: EXAMPLE-DOC-NETdescr: Example Documentation Networkcountry: NLorg: ORG-EX1-RIPEadmin-c: EXA7-RIPEstatus: ASSIGNED PAmnt-by: EXAMPLE-MNTcreated: 2018-11-06T13:42:00Zsource: RIPE # Filteredguidance
Use when a target sits in RIPE's region and you need authoritative ownership for one hostname. For bulk reverse lookups by org or email, use whoisninja instead.
Reverse WHOIS by org, email, phone, or domain. Pivot from owner to assets; do not use it to read one host.
Maps a target to ASN and CIDR ranges. Pair with RIPE WHOIS for full network attribution.
faq
related
Multi-source subdomain discovery; hand names to httpx.
Find domains and subdomains potentially related to a given domain.
CLI client for the BeVigil OSINT API, keyed by domain or app package.
Multi-cloud public name enumeration for AWS, Azure, and GCP.
List assets from multiple cloud providers in one inventory.
Active multi-technique DNS enumeration for assessments.
A hostname feeds whois-with-ripe, which queries the RIPE database and writes the registration records as a file the next stage can pivot on.
Facts on this page come from the live Trickest tool library.