Domain Abuse Activity Reporting
ICANN's Domain Abuse Activity Reporting (DAAR) project is a system for studying and reporting on domain name registration and security threat (domain abuse) behavior across top-level domain (TLD) registries. The overarching purpose of DAAR is to develop a robust, reliable, reproducible, and replicable methodology for analyzing security threat activity that can then be later used by the ICANN community to facilitate informed policy decisions.
The system collects TLD zone data and complements these data sets with a large set of high-confidence reputation (security threat) data feeds. The aggregated and anonymized data collected by the DAAR system can serve as a platform for studying or reporting daily or historical registration or abuse activity by each registry. The data is currently being pushed to registries using the ICANN SLAM system.
The data collected out of the DAAR system is being used to generate the DAAR monthly reports. The reports are point-in-time analysis of all TLDs for which data was available. The report provides aggregated statistics and time-series analysis about security threats of interest to DAAR namely phishing, malware, spam, and botnet command-and-control.
This web page provides links to DAAR monthly reports along with a couple of other DAAR-related documents listed below:
- DAAR monthly reports
- DAAR context document that outlines the context behind the monthly reports and summarizes the methodology behind DAAR
- DAAR methodology paper that contains the detailed method using which DAAR data is collected and metrics are defined
- Two independent reviews on the DAAR methodology paper
- A set of anonymized and un-anonymized documents containing public comments on DAAR reviews
- OCTO-SSR responses to public input
Domain Abuse Activity Reporting FAQ
Domain Abuse Activity (DAAR) Monthly Reports
Context Document: Understanding the DAAR Monthly Report [PDF, 72 KB]
2020
- December 2020 DAAR Monthly Report [PDF, 550 KB]
- November 2020 DAAR Monthly Report [PDF, 532 KB]
- October 2020 DAAR Monthly Report [PDF, 550 KB]
- September 2020 DAAR Monthly Report [PDF, 545 KB]
- August 2020 DAAR Monthly Report [PDF, 512 KB]
- July 2020 DAAR Monthly Report [PDF, 504 KB]
- June 2020 DAAR Monthly Report [PDF, 511 KB]
- May 2020 DAAR Monthly Report [PDF, 514 KB]
- April 2020 DAAR Monthly Report [PDF, 532 KB]
- March 2020 DAAR Monthly Report [PDF, 540 KB]
- February 2020 DAAR Monthly Report [PDF, 531 KB]
- January 2020 DAAR Monthly Report [PDF, 526 KB]
2019
- December 2019 DAAR Monthly Report [PDF, 524 KB]
- November 2019 DAAR Monthly Report [PDF, 533 KB]
- October 2019 DAAR Monthly Report [PDF, 530 KB]
- September 2019 DAAR Monthly Report [PDF, 533 KB]
- August 2019 DAAR Monthly Report [PDF, 523 KB]
- July 2019 DAAR Monthly Report [PDF, 523 KB]
- June 2019 DAAR Monthly Report [PDF, 532 KB]
- May 2019 DAAR Monthly Report [PDF, 542 KB]
- April 2019 DAAR Monthly Report [PDF, 536 KB]
- March 2019 DAAR Monthly Report [PDF, 540 KB]
- February 2019 DAAR Monthly Report [PDF, 540 KB]
- January 2019 DAAR Monthly Report [PDF, 514 KB]
2018
- December 2018 DAAR Monthly Report [PDF, 521 KB]
- November 2018 DAAR Monthly Report [PDF, 521 KB]
- October 2018 DAAR Monthly Report [PDF, 523 KB]
- September 2018 DAAR Monthly Report [PDF, 522 KB]
- August 2018 DAAR Monthly Report [PDF, 527 KB]
- July 2018 DAAR Monthly Report [PDF, 529 KB]
- June 2018 DAAR Monthly Report [PDF, 527 KB]
- May 2018 DAAR Monthly Report [PDF, 517 KB]
- April 2018 DAAR Monthly Report [PDF, 526 KB]
- March 2018 DAAR Monthly Report [PDF, 526 KB]
- February 2018 DAAR Monthly Report [PDF, 511 KB]
- January 2018 DAAR Monthly Report [PDF, 824 KB]
Other Resources
- OCTO-SSR responses to public input on DAAR [PDF, 279 KB]
- Public input by Derek Smythe [PDF, 70 KB]
- Redacted anonymous public input [PDF, 152 KB]
- Public input by Paul Vixie [PDF, 34 KB]
- Public input by RySG [PDF, 450 KB]
- Review by Marcus Ranum [PDF, 459 KB]
- Review by John Bambenek [PDF, 377 KB]
- ICANN org's DAAR methodology paper [PDF, 876 KB]
- Domain Abuse Activity Project Report ICANN 60, October 2017 [PDF, 1.21 MB]
- Domain Abuse Activity Project Report ICANN 59, June 2017 [PDF, 590 KB]