- Apr 25, 2015
- 1,845
- 2
- 2,199
- 327
There are two methods that can be used, the first is with using a Sysinternals binary:
The second option is using a cool project created by Robert D. Biddle [LinkedIn].
This is fairly straight-forward:
Once this module is installed, you can either simply run
Get-WHOIS example.com
or
Get-WHOIS example.com | Select CreationDate
The obvious use-case here is that if you are looking up possible phishing domains, usually these are newly registered in the past month or so.
Code:
cd C:;$ProgressPreference = 'SilentlyContinue';wget https://download.sysinternals.com/files/WhoIs.zip -OutFile whois111.zip;Expand-Archive whois111.zip;cd .\whois111;Copy-Item .\whois.exe -Destination $Env:USERPROFILE\AppData\Local\Microsoft\WindowsApps\whois.exe;whois yahoo.com /accepteula
The second option is using a cool project created by Robert D. Biddle [LinkedIn].
This is fairly straight-forward:
Code:
Install-Module -Name Get-WHOIS
Get-WHOIS example.com
or
Get-WHOIS example.com | Select CreationDate
The obvious use-case here is that if you are looking up possible phishing domains, usually these are newly registered in the past month or so.