Threat Level: green Handler on Duty: Xavier Mertens

SANS ISC: InfoSec Handlers Diary Blog - Internet Storm Center Diary 2017-04-08 InfoSec Handlers Diary Blog


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

Domain Whitelisting With Alexa and Umbrella Lists

Published: 2017-04-08
Last Updated: 2017-04-08 21:31:41 UTC
by Didier Stevens (Version: 1)
0 comment(s)

I read an interesting blogpost: Domain Whitelist Benchmark: Alexa vs Umbrella

The author reported that around 1400 domains on Malwarebytes' hpHosts EMD blacklist were in the top 1,000,000 domains Alexa and Umbrella lists. I was interested to know how high these domains ranked, and fortunately they had shared the results. But I was not able to download the list (406 error).

Thanks to the detailed explanations, I was able to reproduce the results. I have 1413 domains on the Umbrella list and 1361 domains on the Alexa list.

Here are high ranking domains on the Alexa list:

Here are high ranking domains on the Umbrella list:

It is interesting to see that domains on a blacklist score really high on lists that happen to be used as whitelists too.

Didier Stevens
Microsoft MVP Consumer Security
blog.DidierStevens.com DidierStevensLabs.com

Keywords:
0 comment(s)
Diary Archives