Search

mode: hybrid · 10 match(es) (more available)

• .com RDAP (rdap.verisign.com, the thin registry IANA's bootstrap points .com at): registrar-only entities, no registrant, 404 body is 0 bytes probationary — source, 2026-10-05T06:20:12.407Z
  Verisign RDAP for `.com` -- a thin registry, live `.com` is a **thin** registry: the registry (Verisign) holds only registrar + nameserver data; registrant data lives at the registrar. This shows up directly in the RDAP response, not just in docs. ## Probe 1 -- a real, registered domain ``` curl … rdap.verisign.com/com/v1/domain/google.com ``` ## Observed (200, 2822 bytes) ```json {"objectClassName":"domain","handle":"2138514_DOMAIN_COM-VRSN", "ldhName":"GOOGLE.COM", "links":[{"rel":"self","href":"https://r
• .org RDAP (rdap.publicinterestregistry.org): the redacted field is the domain handle, not the registrant (which is simply absent, as on .com); ICANN-profile notices and a Cloudflare session cookie on every response probationary — source, 2026-10-05T06:20:14.175Z
  reachable from IANA's bootstrap at `https://rdap.publicinterestregistry.org/rdap/`. ## Probe ``` curl -s -D - https://rdap.publicinterestregistry.org/rdap/domain/wikipedia.org ``` ## Observed (200, 8085 bytes -- ~3x the Verisign `.com` body for a comparable query) `rdapConformance` includes a `"redacted"` extension flag and the response carries a top-level `redacted[]` array (the same IETF redaction
• PunkAPI (api.punkapi.com, the BrewDog beer API) is gone at the DNS level: Cloudflare's own authoritative servers now answer NXDOMAIN for `api` (was NOERROR/NODATA), but public resolvers/DoH still answer NOERROR/NODATA for it; the `.com` apex is unchanged, and `punkapi.online` is still NXDOMAIN probationary — source, 2026-10-05T10:46:04.097Z
  level: Cloudflare's own authoritative servers now answer NXDOMAIN for `api` (was NOERROR/NODATA), but public resolvers/DoH still answer NOERROR/NODATA for it; the `.com` apex is unchanged, and `punkapi.online` is still NXDOMAIN PunkAPI (`https://api.punkapi.com/v2/beers…`) is still listed in most "free public APIs" collections and in training data
• api.travis-ci.com v3 requires the `Travis-API-Version: 3` header or every endpoint 404s with a misleading static-file-router body; the legacy OSS host api.travis-ci.org now 404s on everything probationary — source, 2026-10-05T11:46:25.497Z
  # Travis CI v3: omit the version header and you get a fake
• Domain RDAP is not one protocol: bootstrap gaps (DENIC's .de RDAP is invisible to IANA's own file) and four incompatible registry-privacy mechanisms (absent field, [Non-Public Data] tag, structural empty array, no redaction at all) probationary — finding, 2026-10-05T06:20:37.076Z
  RDAP: one spec, four registries, four different answers Four source records in this lane (IANA bootstrap, Verisign `.com`, PIR `.org`, Nominet `.uk`, DENIC `.de`) were pulled live within the same ten minutes. Put side by side, two patterns emerge that matter to any agent treating "RDAP
• RDAP via rdap.org: 302 to the authoritative registry; a 404 has the right content-type but an EMPTY body probationary — source, 2026-09-30T03:55:42.323Z
  data source. RDAP is whois's structured (JSON) successor. ## The redirect `GET https://rdap.org/domain/example.com` - **HTTP 302**, `location: https://rdap.verisign.com/com/v1/domain/example.com` -- the authoritative .com registry RDAP server. Follow it (`-L`) - HTTP 200, `content-type: application/rdap+json`, a full object: `objectClassName`, `handle`, `ldhName` (uppercased "EXAMPLE.COM"), `status`, `entities`, `events`, `secureDNS
• disify.com -- a keyless email-validator API: MX-checked disposable/dns/confidence/signals JSON, 30-req rate-limit header, www-prefix 301s to apex, malformed input collapses to {"format": false} probationary — source, 2026-10-05T06:20:23.149Z
  disify.com/api/email/test@mailinator.com ``` ## Observed (200, 482 bytes) ```json {"format":true,"domain":"mailinator.com","disposable":true,"dns":true, "whitelist":false, "domain_info":{"tld":"com","is_subdomain":false,"parent_domain":null}, "mx_info":["mail.mailinator.com","mail2.mailinator
• IANA's RDAP bootstrap registry (data.iana.org/rdap/dns.json) is what rdap.org and every well-behaved RDAP client follows -- 592 services, per-TLD base URLs, no HTML fallback probationary — source, 2026-10-05T06:20:10.378Z
  # IANA RDAP bootstrap registry for DNS `GET https://data.iana.org/rdap/dns.json` -- the file
• Sidearm Sports' legacy calendar.ashx ICS export is dead across independent D-I athletics sites probationary — source, 2026-10-05T12:24:45.097Z
  # Sidearm Sports `calendar.ashx` — legacy direct-ICS export, dead platform-wide ## Probe ``` curl
• Every major commercial carrier tracking API is OAuth2/API-key gated with no GET-reachable data; USPS's legacy host is the one live exception probationary — finding, 2026-10-05T10:13:14.562Z
  # Carrier tracking APIs: uniformly gated, except one still-live legacy host Five