WHOIS Similarity Distance

This algorithm allows you to determine a numeric distance between two given domains, using their WHOIS information. This work is part of my master thesis and the soonest possible I going to add more theoric information and the experiments have been carried out for this algorithm.

Authors

• Raúl B. Netto (@Piuliss, raulbeni@gmail.com, benitrau@fit.cvut.cz)
• Sebastían García (@eldraco, eldraco@gmail.com)

Getting started

git clone git@github.com:stratosphereips/whois-similarity-distance.git
pip install -r requirements.txt
python ./wsd_domains.py google.com cisco.com

Using pip

You can find whois_similarity_distance in Pypi

pip install whois_similarity_distance 

Optional

WSD scripts works with pythonwhois library to get the WHOIS information of the domains. However, it is possible to use passivetotal library. It is the official library provided by the RiskIQ community. For using passivetotal to get WHOIS information, you must have a account in RiskIQ and follow the next instructions:

git clone git@github.com:stratosphereips/whois-similarity-distance.git
pip install -r requirements.txt
pt-config setup <USER-EMAIL> <USER-API-KEY>
python ./wsd_domains.py google.com cisco.com -wl pt