I've seen quite a few services that poll websites to gather information about their server, etc.
Whois.sc for example, has a reverse ip feature that lets you see all the domains that are listed for an ip address.
My question is, how are they getting lists of valid domains to check? (millions) Or.. are they using brute force like a.com ab.com abc.com?