WHOIS is a query protocol and public database that returns registration details for a domain name — registrant, registrar, creation and expiry dates, and name servers. Even when privacy services mask the registrant, historical WHOIS records and patterns across domains can tie properties to a common owner.
WHOIS is a starting point for infrastructure investigation and for mapping the assets a person or organisation controls.