I find whois data less useful every day. 90% of the time when I'm researching suspicious domains, it maps back to one of those shady companies, and the malware

I find whois data less useful every day. 90% of the time when I'm researching suspicious domains, it maps back to one of those shady companies, and the malware author hiding behind it doesn't care about handing over ownership of his disposable DGA domains to said shady company. Even legit sites are starting to hide whois data behind privacy proxies. Hijacked sites only ever map back to a victim, not the perpetrator. As part of my investigative workflow it's largely a waste of time to whois anything. It seems to only benefit domain squatters and spammers.