SecurityTrails Blog

SecurityTrails | Sr. Backend Lead | Remote | https://SecurityTrails.com We're looking for a lead engineer to take the reigns for the backend development team. As we've begun to quickly expand our team we need a lead for the application development side that can work with the data team, our prototyping team, sales engineering, and the principles of the organization to craft the way forward as the teams and demands grow. You should be adept at taking the goals and turning them into tasks for the team, ensuring the output is inline with the long term roadmap and ensuring any hiccups or noise from new team members, or more junior engineers is effectively filtered out. You will take charge of ensuring the test coverage is sufficient, that the team is following processes you need to move the ball forward, and that tasks are correctly architected and validated. Experience in a particular language or technology is not essential, but you should definitely get excited about building cutting edge big data security products. Some of the technologies and tools that we currently use: Elixir, Go, Python, Scala, Elasticearch, Kafka, Spark, Beam, BigTable, BigQuery, Amazon Aurora, AWS, Azure, and GCP. https://sthr.bamboohr.com/hiring/jobs Contact: Theresa Loos <[email protected]>

I'm having the same issue. https://securitytrails.com/ also had my "secret" staging subdomain. I made a catch-all certificate, so the subdomain didn't show up in CT logs. It's still a secret to me how my subdomain ended up in their database.

Related: List of All Cybersecurity Conferences to Attend in 2021 https://securitytrails.com/blog/cybersecurity-conferences 52 of the Best Cybersecurity Conferences to Attend in 2021 https://securityscorecard.com/blog/best-cybersecurity-conferences-to-a… Top 38 US Cybersecurity Conferences to Participate in 2021 https://www.stealthlabs.com/news/top-38-us-cybersecurity-conferences-t… Google Search For "List Of Cybersecurity Conferences" https://www.google.com/search?q=list+of+cybersecurity+conferences

Excellent thinking! These are the SDKs to worry about. Next is, who do they ‘phone home’ to? An easy way to find things is with a local proxy or DNS log, as your phone looks up things on behalf of apps. Which things are looked up by more than one app? A few I noticed back in 2019: iOS “User Linking” Trackers [business].app.link [business].onelink.me [hash].ulink.adjust.com [business].bttn.io bnc.lt branch.io Then you can also see who is invoking them coming from the domain tree: - https://securitytrails.com/list/apex_domain/app.link (2962) - https://securitytrails.com/list/apex_domain/onelink.me (998) - https://securitytrails.com/list/apex_domain/bttn.io (60)

I believe https://securitytrails.com/ is a new player in this space

There's interview but no (too much) technical details: https://securitytrails.com/blog/interview-todayisnew

As pointed out on Reddit [1], if you want to trivially see companies using Mailgun it's as simple as looking at: https://securitytrails.com/list/mx/mxb.mailgun.org https://securitytrails.com/list/mx/mxa.mailgun.org [1] - https://www.reddit.com/r/sysadmin/comments/14vtszl/comment/jrfgvvp/?ut…

> Even Cloudflare participates. 4chan is hosted by Cloudflare https://securitytrails.com/list/apex_domain/4chan.org https://securitytrails.com/list/apex_domain/4channel.org

Seems like related issue was in Aug 2022: https://news.ycombinator.com/item?id=32572906 and might be fixed: We just deployed a workaround that brought our site back up. 1. Find your DNS Target in heroku. It should end with .herokudns.com 2. Lookup the historical DNS record to get the IP addresses. You can find historical DNS records here: https://securitytrails.com/dns-trails 3. Replace your CNAME record in your DNS provider with A records that point to the IP addresses you just found. Your site should come back up shortly. We plan to revert back to CNAME records once Heroku gets their DNS issues sorted.

Do you have a CNAME record pointing to a herokudns.com domain? Replace it with an A record that points to the IP instead. You can find the IP by going to https://securitytrails.com/domain/<something-1234.herokudns.com>…

Can someone clarify what to do if your app doesn't use a custom domain, and running `heroku domains -a` just returns `my_app.herokuapp.com`, and then entering that into https://securitytrails.com/dns-trails returns no results?

We just deployed a workaround that brought our site back up. 1. Find your DNS Target in heroku. It should end with .herokudns.com 2. Lookup the historical DNS record to get the IP addresses. You can find historical DNS records here: https://securitytrails.com/dns-trails 3. Replace your CNAME record in your DNS provider with A records that point to the IP addresses you just found. Your site should come back up shortly. We plan to revert back to CNAME records once Heroku gets their DNS issues sorted.

I used cloudflare-workers still this year and only switched a couple of months ago: https://securitytrails.com/domain/url.rw/history/a The performance was still very bad from a 95 percentile perspective.

I Googled it and I found these two articles that touch on it briefly: https://www.researchgate.net/figure/Network-level-DNS-Fingerprinting_f… https://securitytrails.com/blog/cybersecurity-fingerprinting Is this the kind of tactic you mean?

I found this small explanation > Google “Dorking” is the practice of using Google to find vulnerable web applications and servers by using native Google search engine capabilities. [0] [0] https://securitytrails.com/blog/google-hacking-techniques

While hosting her email on Google apps. https://securitytrails.com/domain/Elizabethwarren.com/dns

You can see some historical domain data using SecurityTrails: https://securitytrails.com/domain/France.com/whois Showing Network Solutions for a long time then switched to OVH in March.

Did you try? https://securitytrails.com/dns-trails

SecurityTrails.com| Senior Backend Developer| remote, full-time|https://securitytrails.com/corp/careers#openings | [email protected] We are looking for a Back-End Web Developer responsible proficient in elixir. Your primary focus will be development of all server-side logic, definition and maintenance of the central database, and ensuring high performance and responsiveness to requests from the front-end. You will also be responsible for integrating the front-end elements built by your coworkers into the application. A basic understanding of front-end technologies is therefore necessary as well. Your responsibilities: - Integration of user-facing elements developed by a front-end developers with server side logic - Building reusable code and libraries for future use Optimization of the application for maximum speed and scalability - Implementation of security and data protection - Design and implementation of data storage solutions Get an insight of our working remote culture here and find some more job postings!

IPinfo.io | Various Roles [Eng / Data / PM / BizDev / Growth / Sales] | Remote | Full-time or Part-time or Contract I started https://ipinfo.io as a small side project 6 years ago, and it has since grown to now handling over 20 billion API requests a month, thousands of customers, is used by hundreds of thousands of developers. We're bootstrapped, profitable, and growing. Here's a recent interview where I talk a bit about the company: https://securitytrails.com/blog/ben-dowling-ipinfo We're a small, remote team, with big ambitions. We're looking to add exceptional people to our team. If you're interested in IP address data and working on fun problems like VPN detection, active IP scanning and measurement, big data processing, scraping or helping us market and grow IPinfo then get in touch! Shoot me a mail describing your background, what you're exceptional at, and what impact you think you could have at IPinfo to [email protected]