THE DISTRIBUTION OF MALICIOUS DOMAINS

[H@ck3r]

THE DISTRIBUTION OF MALICIOUS DOMAINS

In our previous reports, we profiled malicious domains by describing patterns in their
registration details: top level domain (TLD), free email provider, Whois privacy provider, and
hosting location. In this edition, we compared the distributions of malicious domains vs neutral
domains across a measure of age (both of the domain and of the name server domain) and
a measure of the entropy of the domain name. We also examined malicious domains across
registrars to find additional clues as to how and when these domains were registered.