Evaldas Rimasauskas USES WHOIS lookup
Investigators could use a WHOIS lookup to identify who registered and controlled the lookalike domain; the episode does not state that Evaldas used the tool himself.
Attributed Confidence 35% · Jack Rhysider EP 124 Details
“To figure that out, you can do a WHOIS lookup on a domain.”