Skip to content

Instantly share code, notes, and snippets.

@anthonykasza
Created January 12, 2015 18:17
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save anthonykasza/67798cc9985f665a1aee to your computer and use it in GitHub Desktop.
Save anthonykasza/67798cc9985f665a1aee to your computer and use it in GitHub Desktop.
snapshooter example output
{u'authorities': [{u'domain': u'torpig-sinkhole',
u'subs': u'ns2.',
u'tld': u'org',
u'whois': {u'contacts': {u'admin': {u'city': u'Afula',
u'country': u'IL',
u'email': u'the.torpig.cabal@googlemail.com',
u'fax': u'+9.7254786002',
u'handle': u'SPAG-38258072',
u'name': u'Torpig Cabal',
u'phone': u'+9.7254786002',
u'postalcode': u'22225',
u'street': u'Holand 10b/5'},
u'billing': None,
u'registrant': {u'city': u'Afula',
u'country': u'IL',
u'email': u'the.torpig.cabal@googlemail.com',
u'fax': u'+9.7254786002',
u'handle': u'SPAG-38258072',
u'name': u'Torpig Cabal',
u'phone': u'+9.7254786002',
u'postalcode': u'22225',
u'street': u'Holand 10b/5'},
u'tech': {u'city': u'Afula',
u'country': u'IL',
u'email': u'the.torpig.cabal@googlemail.com',
u'fax': u'+9.7254786002',
u'handle': u'SPAG-38258072',
u'name': u'Torpig Cabal',
u'phone': u'+9.7254786002',
u'postalcode': u'22225',
u'street': u'Holand 10b/5'}},
u'creation_date': [u'2009-02-19 15:46:30'],
u'expiration_date': [u'2015-02-19 15:46:30'],
u'id': [u'D155406955-LROR'],
u'nameservers': [u'NS1.TORPIG-SINKHOLE.ORG',
u'NS2.TORPIG-SINKHOLE.ORG'],
u'raw': [u"Domain Name:TORPIG-SINKHOLE.ORG\nDomain ID: D155406955-LROR\nCreation Date: 2009-02-19T15:46:30Z\nUpdated Date: 2014-02-20T01:22:54Z\nRegistry Expiry Date: 2015-02-19T15:46:30Z\nSponsoring Registrar:1 & 1 Internet AG (R73-LROR)\nSponsoring Registrar IANA ID: 83\nWHOIS Server: \nReferral URL: \nDomain Status: ok\nRegistrant ID:SPAG-38258072\nRegistrant Name:Torpig Cabal\nRegistrant Organization:\nRegistrant Street: Holand 10b/5\nRegistrant City:Afula\nRegistrant State/Province:\nRegistrant Postal Code:22225\nRegistrant Country:IL\nRegistrant Phone:+9.7254786002\nRegistrant Phone Ext: \nRegistrant Fax: +9.7254786002\nRegistrant Fax Ext: \nRegistrant Email:the.torpig.cabal@googlemail.com\nAdmin ID:SPAG-38258072\nAdmin Name:Torpig Cabal\nAdmin Organization:\nAdmin Street: Holand 10b/5\nAdmin City:Afula\nAdmin State/Province:\nAdmin Postal Code:22225\nAdmin Country:IL\nAdmin Phone:+9.7254786002\nAdmin Phone Ext: \nAdmin Fax: +9.7254786002\nAdmin Fax Ext: \nAdmin Email:the.torpig.cabal@googlemail.com\nTech ID:SPAG-38258072\nTech Name:Torpig Cabal\nTech Organization:\nTech Street: Holand 10b/5\nTech City:Afula\nTech State/Province:\nTech Postal Code:22225\nTech Country:IL\nTech Phone:+9.7254786002\nTech Phone Ext: \nTech Fax: +9.7254786002\nTech Fax Ext: \nTech Email:the.torpig.cabal@googlemail.com\nName Server:NS1.TORPIG-SINKHOLE.ORG\nName Server:NS2.TORPIG-SINKHOLE.ORG\nName Server: \nName Server: \nName Server: \nName Server: \nName Server: \nName Server: \nName Server: \nName Server: \nName Server: \nName Server: \nName Server: \nDNSSEC:Unsigned\n\nAccess to Public Interest Registry WHOIS information is provided to assist persons in determining the contents of a domain name registration record in the Public Interest Registry registry database. The data in this record is provided by Public Interest Registry for informational purposes only, and Public Interest Registry does not guarantee its accuracy. This service is intended only for query-based access. You agree that you will use this data only for lawful purposes and that, under no circumstances will you use this data to(a) allow, enable, or otherwise support the transmission by e-mail, telephone, or facsimile of mass unsolicited, commercial advertising or solicitations to entities other than the data recipient's own existing customers; or (b) enable high volume, automated, electronic processes that send queries or data to the systems of Registry Operator, a Registrar, or Afilias except as reasonably necessary to register domain names or modify existing registrations. All rights reserved. Public Interest Registry reserves the right to modify these terms at any time. By submitting this query, you agree to abide by this policy.\n\n\n"],
u'registrar': [u'1 & 1 Internet AG (R73-LROR)'],
u'status': [u'ok'],
u'updated_date': [u'2014-02-20 01:22:54']}},
{u'domain': u'torpig-sinkhole',
u'subs': u'ns1.',
u'tld': u'org',
u'whois': {u'contacts': {u'admin': {u'city': u'Afula',
u'country': u'IL',
u'email': u'the.torpig.cabal@googlemail.com',
u'fax': u'+9.7254786002',
u'handle': u'SPAG-38258072',
u'name': u'Torpig Cabal',
u'phone': u'+9.7254786002',
u'postalcode': u'22225',
u'street': u'Holand 10b/5'},
u'billing': None,
u'registrant': {u'city': u'Afula',
u'country': u'IL',
u'email': u'the.torpig.cabal@googlemail.com',
u'fax': u'+9.7254786002',
u'handle': u'SPAG-38258072',
u'name': u'Torpig Cabal',
u'phone': u'+9.7254786002',
u'postalcode': u'22225',
u'street': u'Holand 10b/5'},
u'tech': {u'city': u'Afula',
u'country': u'IL',
u'email': u'the.torpig.cabal@googlemail.com',
u'fax': u'+9.7254786002',
u'handle': u'SPAG-38258072',
u'name': u'Torpig Cabal',
u'phone': u'+9.7254786002',
u'postalcode': u'22225',
u'street': u'Holand 10b/5'}},
u'creation_date': [u'2009-02-19 15:46:30'],
u'expiration_date': [u'2015-02-19 15:46:30'],
u'id': [u'D155406955-LROR'],
u'nameservers': [u'NS1.TORPIG-SINKHOLE.ORG',
u'NS2.TORPIG-SINKHOLE.ORG'],
u'raw': [u"Domain Name:TORPIG-SINKHOLE.ORG\nDomain ID: D155406955-LROR\nCreation Date: 2009-02-19T15:46:30Z\nUpdated Date: 2014-02-20T01:22:54Z\nRegistry Expiry Date: 2015-02-19T15:46:30Z\nSponsoring Registrar:1 & 1 Internet AG (R73-LROR)\nSponsoring Registrar IANA ID: 83\nWHOIS Server: \nReferral URL: \nDomain Status: ok\nRegistrant ID:SPAG-38258072\nRegistrant Name:Torpig Cabal\nRegistrant Organization:\nRegistrant Street: Holand 10b/5\nRegistrant City:Afula\nRegistrant State/Province:\nRegistrant Postal Code:22225\nRegistrant Country:IL\nRegistrant Phone:+9.7254786002\nRegistrant Phone Ext: \nRegistrant Fax: +9.7254786002\nRegistrant Fax Ext: \nRegistrant Email:the.torpig.cabal@googlemail.com\nAdmin ID:SPAG-38258072\nAdmin Name:Torpig Cabal\nAdmin Organization:\nAdmin Street: Holand 10b/5\nAdmin City:Afula\nAdmin State/Province:\nAdmin Postal Code:22225\nAdmin Country:IL\nAdmin Phone:+9.7254786002\nAdmin Phone Ext: \nAdmin Fax: +9.7254786002\nAdmin Fax Ext: \nAdmin Email:the.torpig.cabal@googlemail.com\nTech ID:SPAG-38258072\nTech Name:Torpig Cabal\nTech Organization:\nTech Street: Holand 10b/5\nTech City:Afula\nTech State/Province:\nTech Postal Code:22225\nTech Country:IL\nTech Phone:+9.7254786002\nTech Phone Ext: \nTech Fax: +9.7254786002\nTech Fax Ext: \nTech Email:the.torpig.cabal@googlemail.com\nName Server:NS1.TORPIG-SINKHOLE.ORG\nName Server:NS2.TORPIG-SINKHOLE.ORG\nName Server: \nName Server: \nName Server: \nName Server: \nName Server: \nName Server: \nName Server: \nName Server: \nName Server: \nName Server: \nName Server: \nDNSSEC:Unsigned\n\nAccess to Public Interest Registry WHOIS information is provided to assist persons in determining the contents of a domain name registration record in the Public Interest Registry registry database. The data in this record is provided by Public Interest Registry for informational purposes only, and Public Interest Registry does not guarantee its accuracy. This service is intended only for query-based access. You agree that you will use this data only for lawful purposes and that, under no circumstances will you use this data to(a) allow, enable, or otherwise support the transmission by e-mail, telephone, or facsimile of mass unsolicited, commercial advertising or solicitations to entities other than the data recipient's own existing customers; or (b) enable high volume, automated, electronic processes that send queries or data to the systems of Registry Operator, a Registrar, or Afilias except as reasonably necessary to register domain names or modify existing registrations. All rights reserved. Public Interest Registry reserves the right to modify these terms at any time. By submitting this query, you agree to abide by this policy.\n\n\n"],
u'registrar': [u'1 & 1 Internet AG (R73-LROR)'],
u'status': [u'ok'],
u'updated_date': [u'2014-02-20 01:22:54']}}],
u'domain': u'1nezs80c4534n1t3xvrt1swgkg3',
u'ips': [{u'asn': 0,
u'ip_address': u'82.165.38.206',
u'ip_country': u'',
u'ip_prefix': u'',
u'ip_ttl': 666,
u'ns_ip': u'212.227.55.84',
u'ns_name': u'ns1.torpig-sinkhole.org.'},
{u'asn': 0,
u'ip_address': u'82.165.38.206',
u'ip_country': u'',
u'ip_prefix': u'',
u'ip_ttl': 666,
u'ns_ip': u'87.106.240.162',
u'ns_name': u'ns2.torpig-sinkhole.org.'}],
u'request': u'1nezs80c4534n1t3xvrt1swgkg3.biz',
u'subs': [u''],
u'tld': u'biz',
u'ts': u'2015-01-12_18:05:54.549471',
u'whois': {u'contacts': {u'admin': {u'city': u'Moscow',
u'country': u'Russian Federation',
u'email': u'the.malware.cabal@gmail.com',
u'handle': u'SPAG-41625934',
u'name': u'Spy Eye',
u'phone': u'+49.56953776',
u'postalcode': u'103132',
u'street': u'Ilyinka Street 23'},
u'billing': {u'city': u'Moscow',
u'country': u'Russian Federation',
u'email': u'the.malware.cabal@gmail.com',
u'handle': u'SPAG-41625935',
u'name': u'Spy Eye',
u'phone': u'+49.56953776',
u'postalcode': u'103132',
u'street': u'Ilyinka Street 23'},
u'registrant': {u'city': u'Moscow',
u'country': u'Russian Federation',
u'email': u'the.malware.cabal@gmail.com',
u'handle': u'SPAG-41625936',
u'name': u'Spy Eye',
u'phone': u'+49.56953776',
u'postalcode': u'103132',
u'street': u'Ilyinka Street 23'},
u'tech': {u'city': u'Moscow',
u'country': u'Russian Federation',
u'email': u'the.malware.cabal@gmail.com',
u'handle': u'SPAG-41625935',
u'name': u'Spy Eye',
u'phone': u'+49.56953776',
u'postalcode': u'103132',
u'street': u'Ilyinka Street 23'}},
u'creation_date': [u'2015-01-08 08:22:26'],
u'expiration_date': [u'2016-01-07 23:59:59'],
u'id': [u'D63448649-BIZ'],
u'nameservers': [u'NS1.TORPIG-SINKHOLE.ORG',
u'NS2.TORPIG-SINKHOLE.ORG'],
u'raw': [u'Domain Name: 1NEZS80C4534N1T3XVRT1SWGKG3.BIZ\nDomain ID: D63448649-BIZ\nSponsoring Registrar: 1&1 INTERNET AG\nSponsoring Registrar IANA ID: 83\nRegistrar URL (registration services): whois.schlund.de\nDomain Status: ok\nRegistrant ID: SPAG-41625936\nRegistrant Name: Spy Eye\nRegistrant Address1: Ilyinka Street 23\nRegistrant City: Moscow\nRegistrant Postal Code: 103132\nRegistrant Country: Russian Federation\nRegistrant Country Code: RU\nRegistrant Phone Number: +49.56953776\nRegistrant Email: the.malware.cabal@gmail.com\nAdministrative Contact ID: SPAG-41625934\nAdministrative Contact Name: Spy Eye\nAdministrative Contact Address1: Ilyinka Street 23\nAdministrative Contact City: Moscow\nAdministrative Contact Postal Code: 103132\nAdministrative Contact Country: Russian Federation\nAdministrative Contact Country Code: RU\nAdministrative Contact Phone Number: +49.56953776\nAdministrative Contact Email: the.malware.cabal@gmail.com\nBilling Contact ID: SPAG-41625935\nBilling Contact Name: Spy Eye\nBilling Contact Address1: Ilyinka Street 23\nBilling Contact City: Moscow\nBilling Contact Postal Code: 103132\nBilling Contact Country: Russian Federation\nBilling Contact Country Code: RU\nBilling Contact Phone Number: +49.56953776\nBilling Contact Email: the.malware.cabal@gmail.com\nTechnical Contact ID: SPAG-41625935\nTechnical Contact Name: Spy Eye\nTechnical Contact Address1: Ilyinka Street 23\nTechnical Contact City: Moscow\nTechnical Contact Postal Code: 103132\nTechnical Contact Country: Russian Federation\nTechnical Contact Country Code: RU\nTechnical Contact Phone Number: +49.56953776\nTechnical Contact Email: the.malware.cabal@gmail.com\nName Server: NS1.TORPIG-SINKHOLE.ORG\nName Server: NS2.TORPIG-SINKHOLE.ORG\nCreated by Registrar: 1&1 INTERNET AG\nDomain Registration Date: Thu Jan 08 08:22:26 GMT 2015\nDomain Expiration Date: Thu Jan 07 23:59:59 GMT 2016\nDNSSEC: false\n\n>>>> Whois database was last updated on: Mon Jan 12 18:01:19 GMT 2015 <<<<\n\nNeuStar, Inc., the Registry Operator for .BIZ, has collected this information\nfor the WHOIS database through an ICANN-Accredited Registrar. This information\nis provided to you for informational purposes only and is designed to assist\npersons in determining contents of a domain name registration record in the\nNeuStar registry database. NeuStar makes this information available to you\n"as is" and does not guarantee its accuracy. By submitting a WHOIS query, you\nagree that you will use this data only for lawful purposes and that, under no\ncircumstances will you use this data: (1) to allow, enable, or otherwise\nsupport the transmission of mass unsolicited, commercial advertising or\nsolicitations via direct mail, electronic mail, or by telephone; (2) in\ncontravention of any applicable data and privacy protection acts; or (3) to\nenable high volume, automated, electronic processes that apply to the registry\n(or its systems). Compilation, repackaging, dissemination, or other use of the\nWHOIS database in its entirety, or of a substantial portion thereof, is not\nallowed without NeuStar\'s prior written permission. NeuStar reserves the\nright to modify or change these conditions at any time without prior or\nsubsequent notification of any kind. By executing this query, in any manner\nwhatsoever, you agree to abide by these terms.\n\nNOTE: FAILURE TO LOCATE A RECORD IN THE WHOIS DATABASE IS NOT INDICATIVE\nOF THE AVAILABILITY OF A DOMAIN NAME.\n'],
u'registrar': [u'1&1 INTERNET AG'],
u'status': [u'ok'],
u'updated_date': [u'2015-01-12 18:01:19']}}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment