17 Oct 2026
How WHOIS Referrals Find the Authoritative Server
A referral tells a client which registry or registrar service may hold the next part of the record.
Read “How WHOIS Referrals Find the Authoritative Server”
Direct answer: These reports document time-specific domain and network investigations with named sources, observation times, limits and reproducible next steps.
Reports apply the evidence rules in the lookup methodology. Use the domain research learning hub for stable protocol references behind each time-specific report.
17 Oct 2026
Why a WHOIS Record Shows More Than One Date
WHOIS dates can mark creation, registry expiry, registrar renewal, or the last record update. Read the label before the value.
Read “Why a WHOIS Record Shows More Than One Date”
17 Oct 2026
What a WHOIS Lookup Can and Cannot Tell You
A WHOIS lookup can show registration data, the sponsoring registrar, status values, dates, and the service that answered.
Read “What a WHOIS Lookup Can and Cannot Tell You”
How to read a domain research report
A report is a dated explanation, not a permanent verdict about a domain. Start with the question it answers. Then check which service supplied the evidence, when the observation was made and what the source cannot prove.
- Read the direct answer. It states the narrow finding before the supporting detail.
- Check the evidence layer. Registration, DNS, network and website data describe different parts of a domain.
- Keep both clocks. An event date inside a record is different from the time the report observed that record.
- Repeat important checks. Live records can change, so use the cited source and method when a decision depends on the result.
| Report element | Question to ask | Why it matters |
|---|---|---|
| Source | Which registry, registrar, server or standards body supplied it? | A copied value without its source loses authority and context. |
| Observation time | When was the live response collected? | WHOIS, RDAP and DNS answers can change after publication. |
| Claim boundary | What does this evidence not establish? | A technical clue should not become an unsupported ownership claim. |
What each report must contribute
Reports are accepted only when they add a distinct investigation, comparison, operational example or evidence-based explanation. A new keyword or domain name is not enough to justify a separate page.
Named evidence
Protocol responses, policy documents and observations retain their source and time context.
Decision value
The report explains what a reader can responsibly conclude and what still requires verification.
Distinct scope
Repeated boilerplate, near-duplicate angles and unsupported attribution are held for editorial review.