In WHOIS, every domain name has at least an email address, physical address and phone number that can be publicly accessed (assuming privacy is off).
Could the ability to receive messages/mail at these contact points allow an attacker to take over the domain or gain any other form or leverage? Or are they used purely for human contact/abuse reporting? Social engineering is allowed here.
- The email account registered on the WHOIS contact is compromised
- The phone number is hijacked (SIM swapping, etc)
- Mail to the physical address is intercepted (social engineering a delivery person, etc)
This is assuming that the contact details publicly accessible in WHOIS are different to those used to access the domain registrar account.