PowerShell小技巧之获取域名whois信息

=====文件名：Get-whois.ps1===== function Get-WhoIs {<# Author:fuhj(powershell#live.cn ,http://fuhaijun.com)   # Does a raw WHOIS query and returns the results  #  The simplest whois search  #.Example  #  get-whois dnspod.com  #  #  This example is one that forwards to a second whois server ...  #.Example  #  get-whois baidu.com -NoForward  #  #  Returns the partial results you get when you don't follow forwarding to a new whois server  #  get-whois n 128.11.5.98 -server whois.arin.net  #  #  Does an ip lookup at arin.net  #>  [CmdletBinding()]  param(    # The query to send to WHOIS servers    [Parameter(Position=0, ValueFromRemainingArguments=$true)]    [string]$query,    # A specific whois server to search    [string]$server,    # Disable forwarding to new whois servers    [switch]$NoForward  )  end {    $TLDs = DATA {     @{      ".com"= "whois.verisign-grs.com","whois.crsnic.net"      ".net"= "whois.verisign-grs.com","whois.crsnic.net"      ".org"= "whois.pir.org","whois.publicinterestregistry.net"      ".info"= "whois.afilias.info","whois.afilias.net"      ".biz"= "whois.neulevel.biz"      ".us"= "whois.nic.us"      ".uk"= "whois.nic.uk"      ".ca"= "whois.cira.ca"      ".tel"= "whois.nic.tel"      ".ie"= "whois.iedr.ie","whois.domainregistry.ie"      ".it"= "whois.nic.it"      ".li"= "whois.nic.li"      ".no"= "whois.norid.no"      ".cc"= "whois.nic.cc"      ".eu"= "whois.eu"      ".nu"= "whois.nic.nu"      ".au"= "whois.aunic.net","whois.ausregistry.net.au"      ".de"= "whois.denic.de"      ".ws"= "whois.worldsite.ws","whois.nic.ws","www.nic.ws"      ".sc"= "whois2.afilias-grs.net"      ".mobi" = "whois.dotmobiregistry.net"      ".pro"= "whois.registrypro.pro","whois.registry.pro"      ".edu"= "whois.educause.net","whois.crsnic.net"      ".tv"= "whois.nic.tv","tvwhois.verisign-grs.com"      ".travel"  = "whois.nic.travel"      ".name" = "whois.nic.name"      ".in"= "whois.inregistry.net","whois.registry.in"      ".me"= "whois.nic.me","whois.meregistry.net"      ".at"= "whois.nic.at"      ".be"= "whois.dns.be"      ".cn"= "whois.cnnic.cn","whois.cnnic.net.cn"      ".edu.cn"="whois.edu.cn"      ".asia"= "whois.nic.asia"      ".ru"= "whois.ripn.ru","whois.ripn.net"      ".ro"= "whois.rotld.ro"      ".aero" = "whois.aero"      ".fr"= "whois.nic.fr"      ".se"= "whois.iis.se","whois.nic-se.se","whois.nic.se"      ".nl"= "whois.sidn.nl","whois.domain-registry.nl"      ".nz"= "whois.srs.net.nz","whois.domainz.net.nz"      ".mx"= "whois.nic.mx"      ".tw"= "whois.apnic.net","whois.twnic.net.tw"      ".ch"= "whois.nic.ch"      ".hk"= "whois.hknic.net.hk"      ".ac"= "whois.nic.ac"      ".ae"= "whois.nic.ae"      ".af"= "whois.nic.af"      ".ag"= "whois.nic.ag"      ".al"= "whois.ripe.net"      ".am"= "whois.amnic.net"      ".as"= "whois.nic.as"      ".az"= "whois.ripe.net"      ".ba"= "whois.ripe.net"      ".bg"= "whois.register.bg"      ".bi"= "whois.nic.bi"      ".bj"= "www.nic.bj"      ".br"= "whois.nic.br"      ".br.com"="whois.centralnic.net"      ".eu.org"="whois.eu.org"      ".bt"= "whois.netnames.net"      ".by"= "whois.ripe.net"      ".bz"= "whois.belizenic.bz"      ".cd"= "whois.nic.cd"      ".ck"= "whois.nic.ck"      ".cl"= "nic.cl"      ".coop"= "whois.nic.coop"      ".cx"= "whois.nic.cx"      ".cy"= "whois.ripe.net"      ".cz"= "whois.nic.cz"      ".dk"= "whois.dk-hostmaster.dk"      ".dm"= "whois.nic.cx"      ".dz"= "whois.ripe.net"      ".ee"= "whois.eenet.ee"      ".eg"= "whois.ripe.net"      ".es"= "whois.ripe.net"      ".fi"= "whois.ficora.fi"      ".fo"= "whois.ripe.net"      ".gb"= "whois.ripe.net"      ".ge"= "whois.ripe.net"      ".gl"= "whois.ripe.net"      ".gm"= "whois.ripe.net"      ".gov"= "whois.nic.gov"      ".gr"= "whois.ripe.net"      ".gs"= "whois.adamsnames.tc"      ".hm"= "whois.registry.hm"      ".hn"= "whois2.afilias-grs.net"      ".hr"= "whois.ripe.net"      ".hu"= "whois.ripe.net"      ".il"= "whois.isoc.org.il"      ".int"= "whois.isi.edu"      ".iq"= "vrx.net"      ".ir"= "whois.nic.ir"      ".is"= "whois.isnic.is"      ".je"= "whois.je"      ".jp"= "whois.jprs.jp"      ".kg"= "whois.domain.kg"      ".kr"= "whois.nic.or.kr"      ".la"= "whois2.afilias-grs.net"      ".lt"= "whois.domreg.lt"      ".lu"= "whois.restena.lu"      ".lv"= "whois.nic.lv"      ".ly"= "whois.lydomains.com"      ".ma"= "whois.iam.net.ma"      ".mc"= "whois.ripe.net"      ".md"= "whois.nic.md"      ".mil"= "whois.nic.mil"      ".mk"= "whois.ripe.net"      ".ms"= "whois.nic.ms"      ".mt"= "whois.ripe.net"      ".mu"= "whois.nic.mu"      ".my"= "whois.mynic.net.my"      ".nf"= "whois.nic.cx"      ".pl"= "whois.dns.pl"      ".pr"= "whois.nic.pr"      ".pt"= "whois.dns.pt"      ".sa"= "saudinic.net.sa"      ".sb"= "whois.nic.net.sb"      ".sg"= "whois.nic.net.sg"      ".sh"= "whois.nic.sh"      ".si"= "whois.arnes.si"      ".sk"= "whois.sk-nic.sk"      ".sm"= "whois.ripe.net"      ".st"= "whois.nic.st"      ".su"= "whois.ripn.net"      ".tc"= "whois.adamsnames.tc"      ".tf"= "whois.nic.tf"      ".th"= "whois.thnic.net"      ".tj"= "whois.nic.tj"      ".tk"= "whois.nic.tk"      ".tl"= "whois.domains.tl"      ".tm"= "whois.nic.tm"      ".tn"= "whois.ripe.net"      ".to"= "whois.tonic.to"      ".tp"= "whois.domains.tl"      ".tr"= "whois.nic.tr"      ".ua"= "whois.ripe.net"      ".uy"= "nic.uy"      ".uz"= "whois.cctld.uz"      ".va"= "whois.ripe.net"      ".vc"= "whois2.afilias-grs.net"      ".ve"= "whois.nic.ve"      ".vg"= "whois.adamsnames.tc"      ".yu"= "whois.ripe.net"     }    }    $EAP, $ErrorActionPreference = $ErrorActionPreference, "Stop"    $query = $query.Trim()    if($query -match "(?:/d{1,3}/.){3}/d{1,3}") {      Write-Verbose "IP Lookup!"      if($query -notmatch " ") {        $query = "n $query"      }      if(!$server) { $server = "whois.arin.net" }    } elseif(!$server) {      $server = $TLDs.GetEnumerator() |        Where { $query -like ("*"+$_.name) } |        Select -Expand Value | Get-Random    }    if(!$server) { $server = "whois.arin.net" }    $maxRequery = 3     do {      Write-Verbose "Connecting to $server"      $client = New-Object System.Net.Sockets.TcpClient $server, 43      try {        $stream = $client.GetStream()        Write-Verbose "Sending Query: $query"        $data = [System.Text.Encoding]::Ascii.GetBytes( $query + "`r`n" )        $stream.Write($data, 0, $data.Length)        Write-Verbose "Reading Response:"        $reader = New-Object System.IO.StreamReader $stream, [System.Text.Encoding]::ASCII        $result = $reader.ReadToEnd()        if($result -match "(?s)Whois Server:/s*(/S+)/s*") {          Write-Warning "Recommended WHOIS server: ${server}"          if(!$NoForward) {            Write-verbose "Non-Authoritative Results:`n${result}"            # cache, in case we can't get an answer at the forwarder            if(!$cachedResult) {              $cachedResult = $result              $cachedServer = $server            }            $server = $matches[1]            $query = ($query -split " ")[-1]            $maxRequery--          } else { $maxRequery = 0 }        } else { $maxRequery = 0 }      } finally {        if($stream) {          $stream.Close()          $stream.Dispose()        }      }    } while ($maxRequery -gt 0)    $result    if($cachedResult -and ($result -split "`n").count -lt 5) {      Write-Warning "Original Result from ${cachedServer}:"      $cachedResult    }    $ErrorActionPreference = $EAP  } }