whoisrecon

whoisrecon is a Python command-line tool designed for WHOIS reconnaissance, providing a streamlined way to find related domains from current and historical records (updated quarterly) based on search parameters.

Features

• Filtering Options: Query for domains that match certain filters like the same Registrar, Organization or Email Domain.
• Wildcard Searches: Utilize wildcards (*) to broaden or narrow query results.
• Enrich Data: Enrich the returned domains for name servers, expiration dates, and registrar.
• Historical Data: Searches as historical database that is updated quarterly.

Filtering Options

Sections

• • Admin
• • Registrant
• • Technical
• • Billing

Fields

• • Name
• • Organization
• • Email
• • Street
• • City
• • State
• • PostalCode
• • Fax
• • Country

Supported Domain TLDs

.com	.net	.org	.name	.me
.ru	.us	.uk	.fr	.nl
.lt	.fi	.hr	.hn	.hk
.pl	.br	.ee	.kr	.ca
.info	.su	.si	.kg	.io
.biz	.id	.sk	.se	.no
.nu	.is	.dk	.it	.mx
.in	.cat	.ie	.cz	.online
.cn	.app	.money	.cl	.ar
.by	.cr	.do	.jobs	.lat
.pe	.ro	.tw	.tr	.ua
.website	.ooo	.market	.za

Installation

pip install whoisrecon

Usage

whoisrecon --help

Example Usage

whoisrecon --filter "Registrant:Email=*@whois.com" --enrich

Expected Output ¹

Domain            Creation Date        Expiration Date      Registrar                                Name Servers
----------------  -------------------  -------------------  ---------------------------------------  -------------------------------
whois.com         1995-04-11 04:00:00  2028-04-12 04:00:00  PDR Ltd. d/b/a PublicDomainRegistry.com  ['ANASTASIA.NS.CLOUDFLARE.COM']
whoisdemo.com     2012-03-28 10:22:24  2024-03-28 10:22:24  PDR Ltd. d/b/a PublicDomainRegistry.com  ['ANASTASIA.NS.CLOUDFLARE.COM']

Footnotes

1. Truncated for the example. ↩