series

How Domain Infrastructure Works

From DNS root servers through WHOIS/RDAP to TLS fingerprinting and bot detection — the full stack.

For: Developers building DNS tools, domain scanners, or anti-detection systems

4 parts

Start reading

Parts

  1. 1
    DNS Resolution: The Full Picture How DNS resolution works — root servers, TLD nameservers, record types, response codes, zone files, and why queries are nearly invisible.
    guide 🪴 budding
  2. 2
    WHOIS Is Dead, Long Live RDAP ICANN sunsetted WHOIS in January 2025. RDAP replaced it — structured JSON over HTTPS instead of plaintext over TCP. Here's what changed and why it matters. Requires: DNS Resolution: The Full Picture
    note 🪴 budding
  3. 3
    JA4 Fingerprint t13d1516h2 — TLS Bot Detection in 2026 JA4 fingerprint t13d1516h2 explained: TLS 1.3, HTTP/2 ALPN, Chrome/Safari variants, and how CDNs use JA4 for bot detection.
    article 🌳 evergreen
  4. 4
    Domain Registration: From ICANN to Your Browser How domains move from ICANN through registries and registrars — the three-tier model, EPP, lifecycle states, and what happens when a domain drops. Requires: DNS Resolution: The Full Picture
    note 🪴 budding

Dead internet theory? Working as designed.

This series is AI-drafted — that's the premise, not an accident.