After receiving spam on my newly registered, unused domain within a day I was curious about how they found it. With the help of google I found a site called domainpunch which lists all
Addition to the zone file which gives an idea of the new domains that are registered. And my
gTLD domain was indeed listed on the day I bought it.
I googled some more to find out how you could monitor these changes, to perhaps try it myself. But I quickly found this answer here that says DNS records are not propagated, but only cached. That means at least one request to my domain must have been made via a DNS server they monitor, which seems unlikely, unless they are very high in the
DNS food chain.
More google brought me to
Root name servers and several
network tools, but they all require you to enter the
domain name to get more information.
What am I missing, because it does look like some servers are propagating
DNS zones without a request. Or am I going at this all wrong and are they capturing new domains in another way?
It's not a duplicate of "How does DNS work", because that is based on "REQUEST domainname" and this site doesn't request names, it receives them without knowing them. So it basically goes against the entire principle of how a
DNS server works.
I also highly doubt they just download the
zone file from a lot of
nameservers, because as stated in this answer
no sanely configured DNS server should still allow this nowadays