Dynamics of online scam hosting infrastructure

  • Konte M
  • Feamster N
  • Jung J
  • 34


    Mendeley users who have this article in their library.
  • 19


    Citations of this article.


This paper studies the dynamics of scam hosting infrastructure, with an emphasis on the role of fast-flux service networks. By monitoring changes in DNS records of over 350 distinct spam-advertised domains collected from URLs in 115,000 spam emails received at a large spam sinkhole, we measure the rates and locations of remapping DNS records, and the rates at which grqqfresh IP addresses are used. We find that, unlike the short-lived nature of the scams themselves, the infrastructure that hosts these scams has relatively persistent features that may ultimately assist detection.

Get free article suggestions today

Mendeley saves you time finding and organizing research

Sign up here
Already have an account ?Sign in

Find this document

Get full text


  • Maria Konte

  • Nick Feamster

  • Jaeyeon Jung

Cite this document

Choose a citation style from the tabs below

Save time finding and organizing research with Mendeley

Sign up for free