[Tfug] Slightly OT regarding advanced "whois" searches...

Bexley Hall bexley401 at yahoo.com
Tue Sep 4 12:10:51 MST 2012


--- On Mon, 9/3/12, Jim March <1.jim.march at gmail.com> wrote:

> ...possibly at the Linux command line?
> I need to know which websites share the same
> hosts and/or technical contact names/phone numbers.
>  Basically I've got a line on some "bad guys"
> doing various websites and putting their own names in the
> whois data.  I need to find out how many other sites are
> involved.

If you have a list of *particular* websites, you can fetch the
registration information for each of them and look for "coincidences"
(nslookup | sed | sort | uniq should be a viable pipeline).

OTOH, if you have names of a few folks and are hoping to issue
a blind "tell me which web sites (in the universe of all potential
web sites) these folks are associated with", then you're SoL.
(the registry isn't searchable with those sorts of keys)

--don




More information about the tfug mailing list