Web Hack List

Collected research

Domain-Z: 28 Registrations Later

Re-registering an expired domain inherits its residual trust. Six years of zone diffs, passive DNS, malware feeds and blacklists show 27,758 domains blacklisted only after expiring and 238,279 expired domains later resolved by malware. Cases include an expired secondary nameserver diverting ben.edu traffic to an SEO wildcard, RIR contact emails allowing CIDR takeover by password reset, and expired domains used by browser plugins. Alembic ranks likely ownership changes from passive DNS alone.

Record

Researcher
Chaz Lever, Robert Walls, Yacin Nadji, David Dagon, Patrick McDaniel and Manos Antonakakis
Published by
coeus.ece.gatech.edu
Format
Whitepaper
Topic
Browser

In the archive

Related sources

Tags

This page is the archive's own catalogue record. The research is the work of Chaz Lever, Robert Walls, Yacin Nadji, David Dagon, Patrick McDaniel and Manos Antonakakis, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .