I am looking for a command line way to find all the domains hosted on the same IP address. Is there a way to scan all A records with nslookup?

How do Sites like: http://www.yougetsignal.com/tools/web-sites-on-web-server/ do this?

Thanks C

link|improve this question
Scan all A records? Across all 100,000,000 domains? That might take a long time. – rjmunro Jun 30 '10 at 8:22
feedback

1 Answer

up vote 1 down vote accepted

It's not done by an exact lookup...

From here:

Data is gathered from search engine results, which are not guaranteed to be complete.

Check here for a few methods on how to do it from the command line.

link|improve this answer
robtex does this as well, and it's show up new sites that haven't been indexed yet. – Dentrasi Jun 30 '10 at 7:58
@dentrasi Some information is gleaned from whois as well, which can also give you answers to queries like "what other domains do they own?" – Rowland Shaw Jun 30 '10 at 8:03
feedback

Your Answer

 
or
required, but never shown

Not the answer you're looking for? Browse other questions tagged or ask your own question.