https://github.com/WebBreacher/emailwhois

Look up an email domain (@example.com), using Python, across all known domains.
https://github.com/WebBreacher/emailwhois

Last synced: 21 days ago
JSON representation

Look up an email domain (@example.com), using Python, across all known domains.

• Host: GitHub
• URL: https://github.com/WebBreacher/emailwhois
• Owner: WebBreacher
• License: other
• Created: 2016-06-11T10:57:50.000Z (over 8 years ago)
• Default Branch: master
• Last Pushed: 2023-09-10T12:13:38.000Z (over 1 year ago)
• Last Synced: 2024-11-14T15:37:19.613Z (28 days ago)
• Language: Python
• Size: 25.4 KB
• Stars: 43
• Watchers: 7
• Forks: 11
• Open Issues: 2
• Metadata Files:
  • Readme: README.md
  • License: LICENSE.md

Awesome Lists containing this project

• awesome-hacking-lists - WebBreacher/emailwhois - Look up an email domain (@example.com), using Python, across all known domains. (Python)

README

        
# emailwhois

Look up an email domain (@example.com), using Python, across all known domains using the API at web site http://viewdns.info/reversewhois/?q=%40example.com.

*This script does require an API to ViewDNS.info. They will ban your IP if you scrape their web pages.*

# Sample Help

```

$  python emailwhois.py -h

usage: emailwhois.py [-h] -a API [-d DOMAIN] [-i INFILE] [-o OUTFILE] [-w]

To look up an email wildcard and find all domains reg'd with it

optional arguments:

  -h, --help            show this help message and exit

  -a API, --api API     REQUIRED API to ViewDNS.info

  -d DOMAIN, --domain DOMAIN

                        Single domain to search for (Ex: dhs.gov) or use the

                        -i [file]

  -i INFILE, --infile INFILE

                        [OPTIONAL] Input file for all content. Just a list of

                        domains (Ex. dhs.gov)

  -o OUTFILE, --outfile OUTFILE

                        [OPTIONAL] Output file for all content

  -w, --whois           [OPTIONAL] For each domain retrieved from

                        ViewDNS.info, do a whois [domain]. Default is not to

                        do this.

```

# Issues

1. Only the first 500 domains are retrieved. This is a limit of the viewdns.info site, not my script.

2. I think viewdns.info may be blocking/shunning IPs after a certain number of repeated lookups. Beware.

3. The OUTFILE format without the -w (extra whois) option is CSV-compliant and easy to copy/import into other tools (Excel, Maltego...).

4. The -w (whois) option may hang for long periods when looking up certain domains. Press CTRL-C to skip that "problem domain" and move to the next.

5. If you need to stop the script (especially during the long -w function), press CTRL-Z to send to the background. Then look at the ```[1]+ Stopped``` output and type ```kill %1```. I've used a "1" here but in your system, it may be a 2 or 3 or something else. Look for the number inside the "[ ]" and ```kill %``` that.

# License


This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.