Inventario de sitios deployados — 2026-09-27
Retrieval de 42 dominios contra GitHub, Netlify, Cloudflare y Vercel + expiraciones por RDAP/whois. Hoy: 2026-09-27.
Método:
- dig (NS/A/CNAME) + curl (HTTP/HTTPS, headers, título) para estado de sitio.
- Cloudflare API (token OAuth de wrangler): zones, Pages, Workers domains/routes.
- Vercel CLI (scope
nef-projects); GitHub CLI ([usuario]); Netlify por headerx-nf-request-id. - Expiración: RDAP (
rdap.org) con respaldo whois por registro.
Resumen de estado (42)
🟢 LIVE 9 · 🟡 reto Cloudflare 4 · 🔵 HTTP-only 1 · 🟠 estacionado 2 · ⚪ DNS-only 26
⚠️ Vencen pronto (días restantes)
| Dominio | Expira | Días |
|---|---|---|
| nef.website | 2026-10-15 | 18 |
| nowww.net | 2026-12-18 | 82 |
| datos.pw | 2027-01-06 | 101 |
| de3.pw | 2027-01-12 | 107 |
| folio.icu | 2027-02-03 | 129 |
| da74.net | 2027-02-07 | 133 |
| index.haus | 2027-02-09 | 135 |
Tabla completa
| Dominio | Estado | Proveedor / origen | Expira | Registrar |
|---|---|---|---|---|
| algorithm.rodeo | ⚪ DNS-only | Cloudflare NS | 2027-04-17 | Spaceship |
| archivo.eu.cc | ⚪ DNS-only | subdominio de eu.cc | 2032-03-26 (padre) | SevenX LLC |
| caudal.mx | ⚪ DNS-only | Cloudflare NS | 2027-06-08 | AKKY |
| colab.pw | ⚪ DNS-only | ZoneEdit | 2027-03-16 | Spaceship |
| da74.net | 🟢 LIVE | CF Worker d1-template | 2027-02-07 | Cloudflare |
| data.jetzt | 🟡 CHALLENGE | Cloudflare (proxied) | 2027-04-09 | Sav.com |
| data.mex.com | ⚪ DNS-only | subdominio de mex.com | 2030-10-26 (padre) | Instra Corp. |
| dataflow.com.mx | ⚪ DNS-only | sin NS | 2027-06-23 | NEUBOX |
| dataflow.eu.cc | ⚪ DNS-only | subdominio de eu.cc | 2032-03-26 (padre) | SevenX LLC |
| dataws.de | 🟢 LIVE | Netlify (Next.js) | no público (DENIC) | — |
| datos.pw | ⚪ DNS-only | Cloudflare NS | 2027-01-06 | Spaceship |
| de3.pw | 🟢 LIVE | Cloudflare (proxied) “[usuario] — Home” | 2027-01-12 | Porkbun |
| devsign.net | ⚪ DNS-only | Cloudflare NS | 2027-07-11 | DreamHost |
| editorial.click | 🟠 PARKED | Bodis (302→ww38) | 2027-09-25 | CommuniGal |
| finitud.com | 🟢 LIVE | Netlify “El archivo · finitud” | 2027-03-11 | Name.com |
| folio.icu | ⚪ DNS-only | Cloudflare NS | 2027-02-03 | Spaceship |
| folio.website | ⚪ DNS-only | Cloudflare NS | 2027-06-18 | PDR/PublicDomainRegistry |
| index.haus | 🟡 CHALLENGE | CF Worker index | 2027-02-09 | Porkbun |
| isla.pm | 🔵 HTTP-only | nginx / INWX (443 sin TLS) | 2027-06-18 | INWX |
| lab.com.se | ⚪ DNS-only | Cloudflare NS | no público | — |
| lasele.mx | ⚪ DNS-only | Cloudflare NS | 2027-07-01 | AKKY |
| mercadit.online | ⚪ DNS-only | Cloudflare NS | 2027-05-25 | Network Solutions (domain.com) |
| mercadit.org | 🟠 PARKED | ZoneEdit “Domain Parked” | 2027-05-25 | Network Solutions (domain.com) |
| monstera.cc | ⚪ DNS-only | Cloudflare NS | 2027-06-18 | Cloudflare |
| nef.website | 🟡 CHALLENGE | Cloudflare (proxied) | 2026-10-15 | NameCheap |
| nodo.ws | 🟢 LIVE | CF Worker second-brain | no público | — |
| nowww.net | 🟢 LIVE | Netlify “Donuts & CS” | 2026-12-18 | Spaceship |
| obra.me | 🟡 CHALLENGE | CF Worker vite-react-template | 2027-03-03 | Spaceship |
| paginas.eu.cc | ⚪ DNS-only | subdominio de eu.cc | 2032-03-26 (padre) | SevenX LLC |
| paginas.info | ⚪ DNS-only | Cloudflare NS | 2027-05-25 | Network Solutions (domain.com) |
| parcela.cc | ⚪ DNS-only | Cloudflare NS | 2027-05-08 | Spaceship |
| pizza.sarl | ⚪ DNS-only | Cloudflare NS | 2027-03-26 | — |
| remix.mx | ⚪ DNS-only | Cloudflare NS | 2027-06-19 | NEUBOX |
| sitio.lat | ⚪ DNS-only | Cloudflare NS | 2027-05-04 | Spaceship |
| sitio.one | ⚪ DNS-only | Cloudflare NS | 2027-06-29 | Gname |
| sitio.work | ⚪ DNS-only | Cloudflare NS | 2027-05-04 | Spaceship |
| someideas.tech | ⚪ DNS-only | Cloudflare NS | 2027-04-09 | Namify |
| story.vg | 🟢 LIVE | CF Pages nef (Gatsby) | 2027-04-24 | TLD Registrar Solutions |
| surtido.xyz | 🟢 LIVE | Vercel “Surtidito · hoy” | 2027-06-11 | Porkbun |
| transmedia.mx | ⚪ DNS-only | Cloudflare NS | 2027-06-17 | NEUBOX |
| tres.ovh | 🟢 LIVE | OVH / Apache WordPress | 2027-03-26 | OVH |
| uploader.top | ⚪ DNS-only | Cloudflare NS | 2027-05-08 | Spaceship |
| risible.net | ⚪ DNS-only | zona CF extra (fuera de los 42) | 2027-09-14 | Porkbun |
Cruce con la lista de renovación del usuario
Todos los dominios de la lista están cubiertos. El único fuera de los 42 es risible.net
(zona Cloudflare tuya, sin origen). Fechas de la lista coinciden con RDAP.
- domain.com (Network Solutions): mercadit.online / mercadit.org / paginas.info → 2027-05-25.
- data.mex.com: reportado 2027-06-29 (RDAP del padre mex.com: 2030-10-26).
- Subdominios
*.eu.cc: no registrables por separado; el padreeu.ccexpira 2032-03-26.
Proveedores (detalle)
- Cloudflare Workers (24): custom domains → index.haus→
index, da74.net→d1-template, obra.me→vite-react-template, nodo.ws (+www)→second-brain, editorial.click→astro-blog-starter-template(zona ya no en CF: dominio estacionado en Bodis). - Cloudflare Pages (9): neni-demo, estado-turismo, ruta-{sophia,sur,colonial,pacifico,maya}-staging, yt-extract, nef. Custom: nef.pages.dev + story.vg; da74.net (deactivated).
- Vercel (16,
nef-projects): solo surtido.xyz con dominio custom; resto en*.vercel.app. - Netlify (3 detectados): finitud.com, nowww.net, dataws.de. Sin token no se pudo enumerar el team.
- GitHub: ~80+ repos;
[usuario].github.ioPages →[usuario].js.org(built, live).
Lockdown (Under Attack + Bot Fight Mode) — pendiente de token
Script: ~/nef/bin/cf-lockdown (dry-run por defecto; --apply para ejecutar).
Detecta zonas sin origen (sin A/AAAA/CNAME en apex ni www) por dig y les pone
security_level=under_attack + bot_management.fight_mode=true.
Dry-run (2026-09-27) → 30 zonas sin origen a bloquear: algorithm.rodeo, archivo.eu.cc, caudal.mx, dataflow.com.mx, dataflow.eu.cc, data.mex.com, datos.pw, devsign.net, folio.icu, folio.website, lab.com.se, lasele.mx, mercadit.online, monstera.cc, nef.qzz.io, paginas.eu.cc, paginas.info, parcela.cc, parcela.cc.cd, pizza.sarl, remix.mx, risible.net, sitio.cc.cd, sitio.lat, sitio.one, sitio.work, someideas.tech, transmedia.mx, uploader.top, venv.sryze.cc. (12 zonas con origen se omiten.)
Bloqueo: el token OAuth de wrangler solo tiene zone:read. PATCH
settings/security_level y PUT bot_management → HTTP 403 (9109 / 10000).
CF_API_TOKEN_2 → token inválido (1000). Keychain nef-cloudflare_api_token
no legible (len 0).
Para aplicar crear un API token con: Zone:Read · Zone Settings:Edit · Bot Management:Edit (DNS:Read opcional), luego:
export CLOUDFLARE_API_TOKEN=xxxxx
~/nef/bin/cf-lockdown # revisar
~/nef/bin/cf-lockdown --apply # aplicar
Limitaciones
- Token wrangler tiene
zone:readperodns_recordsdevolvió auth error; origen inferido con dig + Workers domains. - DENIC (.de), .ws, .com.se no publican expiración.
- dataflow.com.mx no tiene delegación NS.