# IDRBT .bank.in Security Investigation - Open Data

The domain lists from this investigation feed into the **[bank-in-domains](https://github.com/CCAgentOrg/bank-in-domains)** project — a daily automated audit of `*.bank.in` and parallel Indian financial TLDs. Every day at 02:30 UTC, it discovers new subdomains and probes each one for DNS resolution, HTTPS reachability, HTTP status codes, and page titles. Results are published as CSV, JSONL, Parquet, and SQLite.

This data enables public uptime monitors like **[uptime.cashlessconsumer.in](https://uptime.cashlessconsumer.in)** and independent verification by any researcher, journalist, or concerned citizen.

## Datasets

| File | Description | Records | PII? |
|------|-------------|---------|------|
| `domains.txt` | All registered .bank.in domain names | 1,497 | No |
| `domains-with-ns.txt` | Domains with name servers configured | 1,402 | No |
| `domains-without-ns.txt` | Domains without name servers | 95 | No |
| `billing.csv` | Anonymized billing/invoice records | 1465 | No |
| `billing.json` | Same data as JSON | 1465 | No |
| `certificate-transparency.csv` | CT log data from crt.sh | 6,543 | No |
| `stats.json` | Aggregate statistics | - | No |

## Ethics

- User PII (names, emails, phones, passwords, IPs) **not published**
- Bcrypt hashes, OTP hashes **not published**
- Only domain names, billing amounts (already public via invoice API), and public CT log data
- Every record in billing.csv was accessible via unauthenticated API on registrar.idrbt.ac.in

## License

Published for independent verification and security research under responsible disclosure principles.