PSYCHORAPTURE, pt. 1 Challenge #2 - Council
This challenge can be found when Wheeler describes the Council in the car.
The Setup
What kind of records might the World Standards Council store?
Help us find the name of the original registrant of the bestpentestcompany.com domain who bought it in 2017.
The flag will NOT be in the standard format. Simply enter the first and last names, for example "Jane Doe".
No file for this one, just a domain name: bestpentestcompany.com. This is an OSINT (Open Source Intelligence) challenge.
The Records
The obvious first move is to look up who owns the domain today. Going to whois.com and searching for the domain shows us the contact info for Porkbun, a domain registrar.
This is due to the GDPR, which came into force in May 2018. Registrars have redacted registrant details in WHOIS since then.
A domain bought in 2017 was registered before that, so the original record will most likely contains a real name; we just need a service that archives old WHOIS records, such as whoxy.
Its history for the domain shows three records:
| Date | Registrant | Organization |
|---|---|---|
| 2017-05-04 (earliest) | a real person | a pentesting company |
| 2024-05-08 | REDACTED FOR PRIVACY | PrivacyGuardian.org llc |
| 2024-09-04 | Domain Administrator | PrivacyGuardian.org llc |
Nice, we now have the name of the person who brought the domain name back in 2017! This is our flag.