3 ms·

I know this is a thing because every time I register a domain or renew a LetsEncrypt cert, I get very specific bot patterns, but I don't know what API's people

I know this is a thing because every time I register a domain or renew a LetsEncrypt cert, I get very specific bot patterns, but I don't know what API's people are using. I assume the cert transparency logs would be one place. Perhaps these API's could use some added friction and protection. Here [1] is some discussion on stackexchange and here [2] is a script that apparently scrapes some data from the free lists on whoisd [3]. I'm finding a rather large number of businesses built around this data. [1] - https://webmasters.stackexchange.com/questions/121160/how-to-find-data-of-newly-registered-domains-and-whois-information https://webmasters.stackexchange.com/questions/121160/how-to... [2] - https://github.com/gfek/Hunting-New-Registered-Domains https://github.com/gfek/Hunting-New-Registered-Domains [3] - https://whoisds.com/newly-registered-domains https://whoisds.com/newly-registered-domains

terrycody 4y ago
Thanks so much for your efforts man! Exactly same from what I can see, there should be a way. Your direction helps a lot, I guess those people can access the "domain pool zone file" and then somehow made this a service, to monitor newly registered domains. After all, I don't need such level thing, I think I am going to manually search new sites instead. Thanks again!
terrycody 4y ago
Btw, what I want to do is I found there are some spammers nowdays, they will publish tens of thousands articles per day from day 1, and amazing their websites can survive Google algorithm for months or even years, before totally wrecked. This strategy works well, so I am eager to see what patterns they takes, how they built the site from start, and why they won't get punished.