2 ms·
I use to have a very reliable but simple python script that asks the whois server for the TLD then gets the whois server from it and asks that server the whois
by _8j50 4y ago
I use to have a very reliable but simple python script that asks the whois server for the TLD then gets the whois server from it and asks that server the whois of the apex and if it gets another whois it asks that server and so on recursively. It was more reliable than any service I found because a lot of TLDs that aren't mainstream or run by random countries have their own finnicy whois with some custom weird webui bur whois on port 43 is always there and contains a lot more info than RIR whois which is what most services tend to show.
Some parameters are reliably there and in a way it is very easy to parse since it is key value separated by a colon (cut -d ':' -f 1,2) but there is no "schema" you can follow and sometimes I saw unique and extra additions by some servers and missing critical fields by others. "Your domain is compromised, bad guys are doing bad stuff with it" how do I reliably find out the right contact for example? That last bit was always a manual excercise.
- teddyh 4y ago> I use to have a very reliable but simple python script that asks the whois server for the TLD then gets the whois server from it and asks that server the whois of the apex and if it gets another whois it asks that server and so on recursively. Don’t modern whois clients all do this? (I.e. not the one available in, say, macOS.)
- _8j50 4y agoPossibly but I was stuck using windows at the time.