pirxthepilot / wtfis

Passive hostname, domain and IP lookup tool for non-robots
MIT License
871 stars 46 forks source link

Whois not able to gather data #25

Open Spiegel-Leser opened 1 year ago

Spiegel-Leser commented 1 year ago

VT and Shodan are working as expected. PT is not configured, since no account is possible now. Whois output is red, "unable to gather data".

pirxthepilot commented 1 year ago

@Spiegel-Leser this sounds like VT not being able to get whois data for the domain. Does it happen on every query or just some? If the latter, mind sharing which domain/s whois is failing on? Thanks!

Also aware of PT being eventually losing free tier access (see #20 ) and currently looking for alternatives. Meantime there is a kind of hack where you can still sign up using this link (if you are so inclined to get a free PT account).

Spiegel-Leser commented 1 year ago

It happens reproducible with some domains. All have in common a german suffix (.de), like wikipedia.de or google.de. On the other hand, amazon.com works.

I'll try the hack, thx.

Am 31.10.22 um 01:44 schrieb joon:

@Spiegel-Leser https://github.com/Spiegel-Leser this sounds like VT not being able to get whois data for the domain. Does it happen on every query or just some? If the latter, mind sharing which domain/s whois is failing on? Thanks!

Also aware of PT being eventually losing free tier access (see #20 https://github.com/pirxthepilot/wtfis/issues/20 ) and currently looking for alternatives. Meantime there is a kind of hack where you can still sign up using this link https://community.riskiq.com/registration/ (if you are so inclined to get a free PT account).

— Reply to this email directly, view it on GitHub https://github.com/pirxthepilot/wtfis/issues/25#issuecomment-1296405679, or unsubscribe https://github.com/notifications/unsubscribe-auth/AHPT2MJFZLN4B4SI7SPQ7FDWF4I7JANCNFSM6AAAAAARSS7QI4. You are receiving this because you were mentioned.Message ID: @.***>

pirxthepilot commented 1 year ago

Latest version (v0.4.0) (PR #31) adds an additional whois source (ip2whois.com) which offers 500 free queries per month. I find the data isn't as good as PT (for example it's still not able to pull whois from .de domains) but it's better than what VT provides. I will keep looking for more quality whois sources.