diff --git a/documentation/README.md b/documentation/README.md index 244791f..2bb4859 100644 --- a/documentation/README.md +++ b/documentation/README.md @@ -1847,6 +1847,36 @@ Module to query a local instance of uwhois (https://github.com/rafiot/uwhoisd). ----- +#### [whoisfreaks](https://github.com/MISP/misp-modules/tree/main/misp_modules/modules/expansion/whoisfreaks.py) + + + +An expansion module for https://whoisfreaks.com/ that will provide an enriched analysis of the provided domain, including WHOIS and DNS information +- **features**: +>The module takes a domain as input and queries the Whoisfreaks API with it. +> +>Some parsing operations are then processed on the result of the query to extract as much information as possible. +> +>After this we map the extracted data to MISP attributes. +- **input**: +>A domain whose Data is required +- **output**: +>MISP attributes resulting from the query on Whoisfreaks API, included in the following list: +>- domain +>- dns-soa-email +>- whois-registrant-email +>- whois-registrant-phone +>- whois-registrant-name +>- whois-registrar +>- whois-creation-date +>- domain +- **references**: +>https://whoisfreaks.com/ +- **requirements**: +>An access to the Whoisfreaks API_KEY + +----- + #### [wiki](https://github.com/MISP/misp-modules/tree/main/misp_modules/modules/expansion/wiki.py) diff --git a/documentation/mkdocs/expansion.md b/documentation/mkdocs/expansion.md index aad226b..37da129 100644 --- a/documentation/mkdocs/expansion.md +++ b/documentation/mkdocs/expansion.md @@ -1844,6 +1844,36 @@ Module to query a local instance of uwhois (https://github.com/rafiot/uwhoisd). ----- +#### [whoisfreaks](https://github.com/MISP/misp-modules/tree/main/misp_modules/modules/expansion/whoisfreaks.py) + + + +An expansion module for https://whoisfreaks.com/ that will provide an enriched analysis of the provided domain, including WHOIS and DNS information +- **features**: +>The module takes a domain as input and queries the Whoisfreaks API with it. +> +>Some parsing operations are then processed on the result of the query to extract as much information as possible. +> +>After this we map the extracted data to MISP attributes. +- **input**: +>A domain whose Data is required +- **output**: +>MISP attributes resulting from the query on Whoisfreaks API, included in the following list: +>- domain +>- dns-soa-email +>- whois-registrant-email +>- whois-registrant-phone +>- whois-registrant-name +>- whois-registrar +>- whois-creation-date +>- domain +- **references**: +>https://whoisfreaks.com/ +- **requirements**: +>An access to the Whoisfreaks API_KEY + +----- + #### [wiki](https://github.com/MISP/misp-modules/tree/main/misp_modules/modules/expansion/wiki.py)