Skip to main content

Identification of malicious domain names

11 Sept. 2019

Researchers from the University of Leuven, in collaboration with EURid, have published a third paper related to the identification of malicious domain names. This paper studies the predictive value of DNS queries for domain names that have been blacklisted by third parties based on malicious registrations identified from earlier research (see link.eurid.eu/prediction1 and link.eurid.eu/prediction2).
 
Marc Van Wesemael, CEO of EURid, commented, "These studies, of which this paper is the third, have been crucial in gaining a better understanding of the malicious domain name ecosystem in order to improve the abuse prevention and early warning systems currently in use at the .eu registry."
 
The study confirms the effectiveness of the prediction system, and its ability to identify more malicious registrations – and with greater speed – than blacklist providers. The detailed study can be found at link.eurid.eu/prediction3.