Dear All, This e-mail thread is very interesting. Thank you. I prefer starting with.. White Paper Criminal Abuse of Domain Names: Bulk Registration and Contact Information Access at https://interisle.net/criminaldomainabuse.html makes a good reading. Sincerely, Gopal T V 0 9840121302 https://vidwan.inflibnet.ac.in/profile/57545 https://www.facebook.com/gopal.tadepalli ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Dr. T V Gopal Professor Department of Computer Science and Engineering College of Engineering Anna University Chennai - 600 025, INDIA Ph : (Off) 22351723 Extn. 3340 (Res) 24454753 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ On 2022-04-04 01:24, John McCormac via CPWG wrote:
On 03/04/2022 19:39, Theo Geurts via CPWG wrote:
Good write up John,
Do you have any stats on DGA botnet domains? I have not seen much of those in the last few years, but since Avalanche (2016) and Conficker (2008) they are not the size they used to be? I do see them at other places, blockchain, IOT, dropbox API abuse.
I haven't been specifically tracking botnet domains, Theo, One possible reason for the decline in the size of DGA networks might be due to the algorithms being cracked and registries being more willing to cooperate. Bad actors may also seek to obscure their footprint as much as possible and using multiple algorithms with smaller networks is an effective way to do it. With discounted new gTLDs, they also can distribute DGA domain names.
Again, the scale of one year registrations works in their favour. Even .COM has about 43% non-renewals (it varies by month/season) for first year registrations.
Regards...jmcc -- -- ********************************************************** John McCormac * e-mail: jmcc@hosterstats.com MC2 * web: http://www.hosterstats.com/ 22 Viewmount * Domain Registrations Statistics Waterford * Domnomics - the business of domain names Ireland * https://amzn.to/2OPtEIO IE * Skype: hosterstats.com **********************************************************
-- This email has been checked for viruses by AVG. https://www.avg.com
_______________________________________________ CPWG mailing list CPWG@icann.org https://mm.icann.org/mailman/listinfo/cpwg
_______________________________________________ By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (https://www.icann.org/privacy/policy) and the website Terms of Service (https://www.icann.org/privacy/tos). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.