Hacker News Reader

Comment by mikae1 | Hacker News Reader

Geez. Has there been any good write-ups about this in the German press?

At the time we didn't know how large the scheme is, because you only find out effectively about those domains if you let your own root/resolver running and listen for the A/AAAA entries coming from cloudflare.

So the real number of those domains is likely to be much much larger if you would have the same dataset like crimeflare had. You can find articles about it with the keyword "Schattenwebsites lieferando" because that's what the press seems to have settled on. Different press teams counted different amount of websites because of that. Another team where I knew people from the CCC that helped them confirmed the 120k number though.

Our final number in Q4 of 2021 was 130k domains that we found out about, and we were trying to contact a bunch of other business owners to be able to escalate the lawsuit onto the Landsgerichtsebene (so that it can go into the Bundesgerichtshofsebene afterwards, and then to the EU court).

[1] https://www.stern.de/wirtschaft/lieferando-lockt-kundschaft-...

[2] https://notizlo.ch/wie-man-gegen-lieferando-domains-arbeitet...

[3] https://t3n.de/news/lieferando-restaurants-schattenwebsites-...

[4] https://www.trendingtopics.eu/lieferando-provisionszahlungen...

[5] https://www.deutschlandfunknova.de/beitrag/schattenwebseiten...

You could perhaps parse the CT logs to see who registered certificates for such domains, no?

CT logs usually don't identify the owner of a site in case of the usual domain validation (DV) certificates. Only OV or EV (organisation or extended validation) certificates provide some hint at the responsible party.

Yeah but you can visit the site and see if it's their usual landing page.

Reply on news.ycombinator.com