diff --git a/analyzers/CERTatPassiveDNS/whois.sh b/analyzers/CERTatPassiveDNS/whois.sh
new file mode 100755
index 000000000..3467195ee
--- /dev/null
+++ b/analyzers/CERTatPassiveDNS/whois.sh
@@ -0,0 +1,2 @@
+#!/usr/bin/env bash
+whois -h pdns.cert.at "  $1"