Add support for annotating targets and hostnames
hellais opened this issue · comments
It would be nice to add annotations that we can update over time related to hostnames.
Things that I would like to be able to say are flags like if the hostname hosts a domain name parking page, if the hostname is expired or any other feature that's relevant to the analysis.
See also:
Relevant issues:
Sharing additional notes from slack:
On the topic of parked domains, there is this paper that documents a methodology for automatically detecting such domains: https://www.ndss-symposium.org/ndss2015/ndss-2015-programme/parking-sensors-analyzing-and-detecting-parked-domains/.
I think for a basic first pass we don’t even have to implement their ML based approach, but just use the list of the most common nameservers used by domain parking services and filter them out based on that (there is such a list in the paper).