[SWLUG] Locating domain names?

[Dave Cridland]

On Wed Nov 22 11:33:36 2006, Foeh Mannay (SWLUG) wrote:
> > You have an IP address. You think there may be a web domain 
> parked on
> > it. Is there any way to find out what that domain(s) may be on the
> > address or even DNS servers.
> 
> 
You can send a HTTP/1.0 request to it sometimes, and it might list 
the HTTP/1.1 sites it has available. But generally, the servers that 
did this were rare anyway, and have since died out.


> I don't think it works like that. As anyone on any top level domain 
> could
> choose to point their DNS entries at any IP address they like on the
> Internet, I don't think there's any way to trace it back. It would 
> involve
> getting zone transfers for every domain name on the 'net, which 
> isn't
> going to happen.
> 
> 
Well, you'd need to query every domain name in existence, yes.


> The reverse DNS, as you've already discovered, will be owned by 
> whoever
> owns the IP range it's sat on, and if anything will only return the 
> name
> the hosting company use for it. There's no requirement to tie a 
> reverse
> DNS to every forward DNS entry.
> 
> 
It's also impossible, IIRC. A domain cannot have multiple PTR records.

Dave.
-- 
Dave Cridland - mailto:dave at cridland.net - xmpp:dwd at jabber.org
  - acap://acap.dave.cridland.net/byowner/user/dwd/bookmarks/
  - http://dave.cridland.net/
Infotrope Polymer - ACAP, IMAP, ESMTP, and Lemonade