Not quote the ones I was referring to - many services just look at DNS and get t... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		shittyadmin on Jan 22, 2019 \| parent \| context \| favorite \| on: Why does APT not use HTTPS? Not quote the ones I was referring to - many services just look at DNS and get the A record for every domain then offer reverse lookup - complete lists of domains are purchasable for all major TLDs. The only defense to this would be to host your content on a subdomain. DNSlytics, DomainTools, W3Advisor and others offer this.

Ayesh on Jan 22, 2019 [–]

It's also easy to just scan a whole range (say, top 1m Alexa domains) and log the IP. You can scan 1m sites on a cheap $5 VPS nowadays.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact