IMPORTANT: This project is an heavily modified fork of uWhoisd

The main change is that it uses the linux whois command on every call unless otherwise specified in the config.

A 'Universal WHOIS' proxy server: you query it for information about a particular domain, it works out the correct WHOIS server to query and gives back the correct details.

You will need a whois command installed on the system, and poetry.

On Ubuntu/Debian, apt install whois will get you a whois client. For poetry, please have a look at the install guide.

You need to have redis cloned and installed in the same directory you clone uwhoisd in: uwhoisd and redis must be in the same directory, and not redis cloned in the uwhoisd directory. See this guide.

Follow the install guide on lookyloo website.

The install guide above explains how to run uwhoisd as a system service. If you want to run it manually, do as follow:

poetry run start
poetry run stop

Requesting a whois entry for a fully qualified domain name (FQDN) only works if the request only contains the domain. uWhoisd will automatically strip the subdomain part if it is present in the request.

Example: www.theguardian.co.uk

• TLD: co.uk (uWhoisd uses the Mozilla public suffix list as a reference)
• Domain: theguardian.co.uk
• Subdomain: www

The whois request will be for theguardian.co.uk

$ (git::main) telnet 0.0.0.0 4243 
Trying 0.0.0.0...
Connected to 0.0.0.0.
Escape character is '^]'.
www.google.de
% Restricted rights.
% 
% Terms and Conditions of Use
% 
% The above data may only be used within the scope of technical or
% administrative necessities of Internet operation or to remedy legal
% problems.
% The use for other purposes, in particular for advertising, is not permitted.
% 
% The DENIC whois service on port 43 doesn't disclose any information concerning
% the domain holder, general request and abuse contact.
% This information can be obtained through use of our web-based whois service
% available at the DENIC website:
% https://www.denic.de/en/domains/whois-service/web-whois.html
% 
% 

Domain: google.de
Nserver: ns1.google.com
Nserver: ns2.google.com
Nserver: ns3.google.com
Nserver: ns4.google.com
Status: connect
Changed: 2018-03-12T21:44:25+01:00Connection closed by foreign host.

import socket
def whois(self, query: str) -> str:
    bytes_whois = b''
    with socket.socket(socket.AF_INET, socket.SOCK_STREAM) as sock:
        sock.connect((self.server, self.port))
        sock.sendall(f'{query}\n'.encode())
        while True:
            data = sock.recv(2048)
            if not data:
                break
            bytes_whois += data
    to_return = bytes_whois.decode()
    return to_return