the question is how you figured out that they belong to the same person .

they are hundred of thousands of people that uses CF if not millions , that have the same NS servers how do you figure out they are the same entity ?

(August 11, 2022, 01:13 PM)Dang Wrote: they are hundred of thousands of people that uses CF if not millions , that have the same NS servers how do you figure out they are the same entity ?

https://github.com/indianajson/cloudflare-nameservers/blob/main/cloudflare-names.txt has 899 nameservers, that's roughly 400k possible pairs (according to my bad math). Sure, there might be some domains in there that belong to someone else, but you can take educated guesses and find what you're looking for

(August 11, 2022, 04:23 PM)tilly Wrote:

(August 11, 2022, 01:13 PM)Dang Wrote: they are hundred of thousands of people that uses CF if not millions , that have the same NS servers how do you figure out they are the same entity ?

https://github.com/indianajson/cloudflare-nameservers/blob/main/cloudflare-names.txt has 899 nameservers, that's roughly 400k possible pairs (according to my bad math). Sure, there might be some domains in there that belong to someone else, but you can take educated guesses and find what you're looking for

idk to me it sounds vague

how do you can take such educated guess ..

i can be a user of CF , i put couple of my domains there  , why should/would i get the same NS server from each and every domain .

(August 8, 2022, 10:23 AM)tilly Wrote: I want to be able to search for domains by a PAIR of nameservers, not just by one. I haven't found any tools for that, does anyone know where to get one?

use dig on linux look NS records , also amass is good at dns recon, it uses lots of different sources .

also a classic is , you can find loads of tools that can do this
https://dnsdumpster.com/

Can you not use API for nics?

ipv4info and Spyse used to hold data like this but I believe both are gone now so it would probs be a third party would be your best bet

(August 11, 2022, 09:57 PM)Dang Wrote:

(August 11, 2022, 04:23 PM)tilly Wrote:

(August 11, 2022, 01:13 PM)Dang Wrote: they are hundred of thousands of people that uses CF if not millions , that have the same NS servers how do you figure out they are the same entity ?

https://github.com/indianajson/cloudflare-nameservers/blob/main/cloudflare-names.txt has 899 nameservers, that's roughly 400k possible pairs (according to my bad math). Sure, there might be some domains in there that belong to someone else, but you can take educated guesses and find what you're looking for

idk to me it sounds vague

how do you can take such educated guess ..

i can be a user of CF , i put couple of my domains there  , why should/would i get the same NS server from each and every domain .

Assuming you are using the same account for every domain, you will receive the same nameserver.

This is based on what I know about cloudflare and what I have gathered from other users. I apologize for any miss information I might be spreading, this was never my intention.

(August 20, 2022, 11:46 AM)mishka Wrote:

(August 11, 2022, 09:57 PM)Dang Wrote:

(August 11, 2022, 04:23 PM)tilly Wrote:

(August 11, 2022, 01:13 PM)Dang Wrote: they are hundred of thousands of people that uses CF if not millions , that have the same NS servers how do you figure out they are the same entity ?

https://github.com/indianajson/cloudflare-nameservers/blob/main/cloudflare-names.txt has 899 nameservers, that's roughly 400k possible pairs (according to my bad math). Sure, there might be some domains in there that belong to someone else, but you can take educated guesses and find what you're looking for

idk to me it sounds vague

how do you can take such educated guess ..

i can be a user of CF , i put couple of my domains there  , why should/would i get the same NS server from each and every domain .

Assuming you are using the same account for every domain, you will receive the same nameserver.

This is based on what I know about cloudflare and what I have gathered from other users. I apologize for any miss information I might be spreading, this was never my intention.

gotcha

Maybe you can code script for sub enum / website history list from virustotal its big database and greats speed

Y use it for

Domain > to sub > to sub > to sub
Or
Ip > to domain

:)