The former Soviet Union’s domain traffic is driven by a botnet.
Last month, Cloudflare launched a new section in Cloudflare Radar that ranks top level domains by their “DNS Magnitude”, which is a measure of how many unique clients send queries to the TLD.
The company made the surprising filing that the Soviet Union’s legacy domain, .su, has a higher DNS Magnitude than even .com.
But looking into the data further, the top second level domains driving traffic in .su were a couple of strange domains, such as 14emeliaterracewestroxburyma02132 .su.
Well, it turns out these domains are being used in a botnet.
Cloudflare began redacting these domains from its SLD list, and they appear to have been fully removed. But the data is still showing up in its TLD lists. .Su is currently ranked #7, and the list is led by .st, which also has a domain used in the botnet.
Source: https://domainnamewire.com/
