Hacker News Reader

From what I understand [1] is just tlds, not subdomains?

That would be incorrect, they get subdomains for passive dns feeds.

Ok, it'd be interesting to know how big is their datasets compared to mine and how much they overlap.