Inferential Analysis of Malicious Domain Registrations

This report presents an inferential analysis of maliciously registered domains, focusing on the factors influencing cybercriminals' choices in domain registration. It identifies and analyzes 73 features categorized into three main groups: registration attributes, proactive verification, and reactive security practices. The report employs a generalized linear model (GLM) regression analysis to quantify the impact of these features on the prevalence of malicious registrations. Findings indicate that a reduction in registration fees significantly correlates with an increase in malicious domain registrations, with each dollar decrease leading to a 49% rise. Additionally, the availability of free services, such as web hosting, is linked to an 88% increase in phishing activities. Conversely, stringent restrictions on registrations can reduce abuse by 63%. The report aims to provide insights for intermediaries involved in domain registration to develop effective anti-abuse practices while considering their economic incentives. The document is structured to include background information, related work, datasets, and detailed analyses of the driving factors behind domain abuse.