Live data from Hacker News

Find every domain someone owns automatically

securitytrails.com

1–10 of 110 posts

Re: Find every domain someone owns automatically

#6
Just tried it with some of my own details. Found a domain I forgot I owned on an old reseller I havent used in a while - lol.

On a more serious note - I'm very curious how you get such a long history of domains. i.e. I can see every DNS change and ownership for any domain - I didnt realise that was always available?

Re: Find every domain someone owns automatically

#7

Just tried it with some of my own details. Found a domain I forgot I owned on an old reseller I havent used in a while - lol. On a more serious note - I'm very curious how you get such a long history of domains. i.e. I can see every DNS change and ownership for any domain - I didnt realise that was always available?

Hi! We acquired 4 companies that have been doing lots of cool data work. We also license and collect our own data to mix in. There's different granularity depending on the data (WHOIS history, Name Server history, DNS record history, technologies used) etc. We're constantly improving it.

The thesis we have is that if you get hacked, it often times is through an old server or satellite domain. We're building tools to help you find the extended surface area where you can be hacked or have downtime. The example of you finding an old domain is a prefect use case.

Re: Find every domain someone owns automatically

#9

Earlier quoted context omitted.

Although it didn't work as I expected.

Hey, we're still kind of new and kicking the tires. Any UX feedback or data feedback is appreciated!

It's pretty much missing or empty data for the entire .au TLD (e.g. even google.com.au is not present).

Living here, I know that their whois server rate limits heavily and the ccTLD zonefile is not available, so I'm guessing those are probably contributing reasons. Do you guys do any crawling at all?

I think this is a fantastic concept though. Knowing that whois database and zonefile access is often protected for commercial motivations, it really irks me. Open it all up.

Re: Find every domain someone owns automatically

#10
post #8

i guess this doesn't work for private registration. E.g. Domains by Proxy's phone number has ~11 million domains.

We have a really fun blog post coming out for this next week or so. One of our team found a pretty big bug in certain private registrations. Stay tuned.
Post reply on HN