3 ms·
How do they get the list of domains hosted? Doesn’t look like they initiate an SSL connection. Do they resolve every single domain (and therefore can’t see sub
by cm2187 5y ago
How do they get the list of domains hosted? Doesn’t look like they initiate an SSL connection. Do they resolve every single domain (and therefore can’t see sub domains)? Or is there another trick?
- tyingq 5y agoProbably data sources like this: https://all-registered-domains.whoisxmlapi.com/ https://all-registered-domains.whoisxmlapi.com/ Also, generic web crawling, certificate transparency logs. Combined with lots of DNS queries.
- tentacleuno 5y agoNot really sure if it works for Dynamic DNS, either. I have one or two things pointing at my IP. Nothing comes up about them :(
- ricardo81 5y agoZone files are available for most gTLDs, would guess that's the prevalent way. A lot of "IP neighbourhood" type tools use these. A telltale sign is not seeing any ccTLD domains which are generally less easy to get a list of.