For an example, let’s say someone is on a website like thisismysite.com and you would like to know about what other websites are owned by that same person who own’s thisismysite.com. Is this achievable?.
Of course!, there are many easy work around’s (and also tools) that will help you find out this information, you can find out the domains that are owned by an individual company directly through searching on the internet but you may not exactly be successful on every single hunt. Let’s give this a shot.
1) Use Google for reverse Whois Lookups
When anyone registers a domain, the name of the owner, contact address of that person, phone number and also other details are stored within that domain in a registry that is accessible to the public, which anyone can actually access online by using the Whois Lookup tool.
If you go to Whois.net and then enter your domain name that you are trying to find out. This information will provide the contact details of the owner of that website your wondering about, including the details of the domain registrant and then you can then use this data to perform a reverse Whois lookup on Google in finding other domains of that specific person or owner.
“PHONE_NUMBER” site:whois.domaintools.com “STREET_ADDRESS” site:whois.domaintools.com
Try to replace the Street Address or even the Phone number in the search queries above with actual data from the Whois database. Then you could also try a reverse Whois Lookup by a specific name though it may bring in too many results, as phone numbers and also postal addresses could be unique most likely.
2) Attempt a Reverse IP Lookup
Some owners of domains chose the “private” registration options (Google Apps actually does this already for free) and also in that specific case, their own contact details then will not be available within the public Whois database.
In the next option you should then try to do a Reverse IP lookup. And these specific tools then figure out the IP address of the server that is actually hosting the website, thisismysite.com is an example, and it will then give us a list of other websites that are also hosted on the same exact server. The specific logic is that if one person has more than one website, he could be using the same exact web server to host them all.
You can also do a Bing search to do a Reverse IP lookup, to check for any domains or an even better tool is spyonweb.com, which specifically puts the site’s domain in there and it will then display other websites that are hosted on that server alone. If you then get numerous domains in a list, in the search results, then it may actually mean that the person is actually using a shared host and then he may actually be using a shared host and then he may not be the owner of all of those domains in the list.
3) Try Google AdSense Lookups
I actually had pretty easy success with using the AdSense Publisher ID in searching with Google, Blekko felt alot like Bing…. just another wannabe search engine.
If you view the HTML page source of any specific website and also look for the string for the AdSense code, it will have a pattern going along the lines of ca-pub-1234. This numeric part (1234) is actually the AdSense ID which is what you can actually put into Blekko in this kind of format:
And some of the sites that are returned, may belong to scrapers though you should be capable of discovering many legit sites additionally, if they are all using AdSense, who doesn’t use AdSense?.
4) Google Analytics Reverse Lookups
Google Adsense is actually only the most popular advertising monetization used by many content publishers and most of all sites are using Google Analytics for tracking their traffic data. And there are also other online tools that are available that can actually very quickly find all of the websites that are connected to the same exact Google Analytics account.
If you go to ewhois.com and then type in the domain name that you are specifically searching. Then choose “Reverse Google Analytics ID Lookup tab and then it should then bring a list within all of the web sites that are connected to the same exact Google Analytics ID.
Apparently this is the most effective method of them all but it would actually only work for websites that are live and that use Analytics while the standard Whois lookups may not be able to even find the web sites that have only been registered but aren’t live just yet.