Mechanism of Parked Domains Recognition Based on Authoritative DNS Servers

Abstract

At present, there are a large number of parked domains, which seriously affect online users when surfing. To identify parked domains effectively, a new technique was proposed based on authoritative Domain Name Server (DNS). In this way, suspected authoritative DNS servers of typosquatting domains were extracted, which commonly used in domain parking service. Then these DNS servers were clustered by semi-supervised clustering method, to identify whether they were associated with domain parking service. When detecting a parked domain, we can identify it by judging whether its authoritative DNS applied in domain parking service and whether its mapping IP addresses concluded in the set od IP addresses of parking web servers. With existing detecting method by using webpage's features to analyze the accuracy of the proposed method, the experimental results show the proposed method achieves a high accuracy rate of 92.8%, avoids crawling the webpages, has a good performance on parked domains detection in real time.