Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Find every domain someone owns automatically

securitytrails.com

Post reply on HN
Print view View original

21–30 of 110 posts

Re: Find every domain someone owns automatically

#21

Post by mxpxrocks10 »

ploggingdev wrote: post #15
mxpxrocks10 wrote: post #10

Earlier quoted context omitted.

We have a really fun blog post coming out for this next week or so. One of our team found a pretty big bug in certain private registrations. Stay tuned.

Can you give a gist of your findings? I'll take a guess : customers are given unique whois protected email addresses allowing you to find all the domains owned by the person. Eg- If I own abc.com and xyz.com, both have the same public email address. The problem with such bugs is that there's no way to undo the damage since historical whois records are archived.

you nailed it. It goes a little further with what you can see and how easy it is but right on point! If you notice anything else people would find interesting, feel free to post it or email me (in profile).

Re: Find every domain someone owns automatically

#22

Post by kuschku »

mxpxrocks10 wrote: post #20
kuschku wrote: post #19

So, for .de it just returns either NULL, undefined, or empty for everything, for .eu it errors out entirely, and for the domains of me it does find, it has wrong data. kuschku.de has, for the past 2 years, always pointed at 51.15.1.223 or 163.172.217.134, never at 204.236.227.242. Funnily, for other domains pointed at the same IPs, it has correct data – e.g. quasseldroid.info correctly shows the IP history. The datas…

hey- would love it if you can drop me an email (in profile) so we can debug/improve. .DE is particularly hard because they lock down the zone file. GTLDs like .INFO are easier to get because the zone files are open. We have 9 years daily granularity for the gTLDs. Would love to clean up the U/X so it's clear what we have data for and what we don't to be completely transparent. Thanks for the note.

Your profile doesn’t have any email address in it, but you can just check https://dnstrails.com/#/domain/domain/kuschku.de vs. https://dnstrails.com/#/domain/domain/quasseldroid.info

For example, WHOIS info https://i.imgur.com/WNpyvcl.png should maybe show something like "none available", or "no WHOIS info is available for .de", or "go to denic.de to see WHOIS info" (DENIC offers the WHOIS info, if you enter the captcha). On the other hand, http://whois.domaintools.com/kuschku.de (a competitor) correctly shows the WHOIS.

Second, with the domain – I have no idea how the wrong value ended up on there.

Re: Find every domain someone owns automatically

#24

Post by computer22 »

kuschku wrote: post #22
mxpxrocks10 wrote: post #20

Earlier quoted context omitted.

hey- would love it if you can drop me an email (in profile) so we can debug/improve. .DE is particularly hard because they lock down the zone file. GTLDs like .INFO are easier to get because the zone files are open. We have 9 years daily granularity for the gTLDs. Would love to clean up the U/X so it's clear what we have data for and what we don't to be completely transparent. Thanks for the note.

Your profile doesn’t have any email address in it, but you can just check https://dnstrails.com/#/domain/domain/kuschku.de vs. https://dnstrails.com/#/domain/domain/quasseldroid.info For example, WHOIS info https://i.imgur.com/WNpyvcl.png should maybe show something like "none available", or "no WHOIS info is available for .de", or "go to denic.de to see WHOIS info" (DENIC offers the WHOIS info, if you enter the capt…

Hi kuschku, thanks for providing us with the samples with the outdated/missing data. We will definitely look into the case and continue to enhance the data we collect.

The UI enhancements you mention are excellent - we will implement this shortly (not only for .de but for any case where we can not output any values).

Feel free to contact us at the e-mail address given at the bottom on every dnstrails page!

Re: Find every domain someone owns automatically

#26

Post by jlgaddis »

mxpxrocks10 wrote: post #11
regecks wrote: post #9

Earlier quoted context omitted.

It's pretty much missing or empty data for the entire .au TLD (e.g. even google.com.au is not present). Living here, I know that their whois server rate limits heavily and the ccTLD zonefile is not available, so I'm guessing those are probably contributing reasons. Do you guys do any crawling at all? I think this is a fantastic concept though. Knowing that whois database and zonefile access is often protected for com…

right now we're getting .au domains from Open Crawl. It's tricky because the zone file is not available like you mentioned. If anyone has any ideas on how to get more .au domains, we'll gladly implement.

CT logs come to mind, if you aren't using them already.

DNS queries, if you have access to recursive resolvers.

Re: Find every domain someone owns automatically

#29

Post by mxpxrocks10 »

brad1043 wrote: post #28

Also, is your WHOIS data for each domain "live", meaning it's being queried in real time?

1. for the current record displayed on the domain results page, it's live but then has a short cache after the first time it's pulled on the public site.

2. For the whois registrant search, it's around 90 days old right now, but we're working on techniques to make it more current.

Post reply on HN