Re: [gnso-ff-pdp-may08] fast flux numbers lately

[Dave Piscitello <dave.piscitello@xxxxxxxxx>]

This is really helpful work and easily visualized.

I wonder if a pie chart is the best illustration, since it has the effect of
allowing TLDs with less than 1.6% to deceive themselves into believing that
they are not targets for phishing/FF. I wonder if you could apply a metric
similar to the one Rod and Greg use in the APWG Global Phishing Survey: FF
domains per 10,000 registrations?


On 11/27/08 7:08 PM  Nov 27, 2008, "Joe St Sauver" <joe@xxxxxxxxxxxxxxxxxx>
wrote:

>
>
> #> Do you have breakdowns of the domains by TLD?
> #
> #I do!
> #
> #  16745 com
> #   6393 cn
> #    470 net
> #    399 org
> [remainder snipped]
>
> If a pie chart would be in order (and I think it would! :-)),
> 67.3% of the domains are .com's, 25.7% of them are .cn's,
> 1.9% are .net's and 1.6% are .org's.
>
> Collectively, just .com and .cn account for nearly 93% of all
> the FF domains seen; .com+.cn+.net+.org=96.4+%.
>
> All the other domains are individually less than a percent.
>
> This makes it pretty clear to me that FF is basically a
> dot com (or dot com+dot net+dot org) and dot cn phenomenon.
>
> If we need text to explain *why* these two TLDs are the
> most popular, I would point out that at least in the
> case of dot cn domains, dot cn was having a "one yuan
> domain sale" for some time (one yuan is USD 0.14-0.15 or
> so), which makes it one of the cheapest (if not the
> cheapest) domains available.
>
> Regards,
>
> Joe