Top DNS domains seen on the Quad9 recursive resolver array each day
1–10 of 100 posts
Re: Top DNS domains seen on the Quad9 recursive resolver array each day
#2What’s up with wvdbozpfc.com?
There’s a bunch of random looking domain names: cmidphnvq.com, rpqihexdb.com, facebook.com. I’d guess they for advertising?
Re: Top DNS domains seen on the Quad9 recursive resolver array each day
#3I expected to see porn in the list.
Re: Top DNS domains seen on the Quad9 recursive resolver array each day
#4> https://github.com/Quad9DNS/quad9-domains-top500/blob/main/t...
{"position": 5, "domain_name": "kxulsrwcq.com", "date": "2025-07-10"}
What the
https://www.ipaddress.com/website/kxulsrwcq.com/
> Safety/Trust: Unknown
Re: Top DNS domains seen on the Quad9 recursive resolver array each day
#5What’s up with wvdbozpfc.com? There’s a bunch of random looking domain names: cmidphnvq.com, rpqihexdb.com, facebook.com. I’d guess they for advertising?
Also blockdh100b ?
Re: Top DNS domains seen on the Quad9 recursive resolver array each day
#6What’s up with wvdbozpfc.com? There’s a bunch of random looking domain names: cmidphnvq.com, rpqihexdb.com, facebook.com. I’d guess they for advertising?
Or malware, those would typically be fairly random domain names that are queried for updates or instructions by a large number of infected devices.
Re: Top DNS domains seen on the Quad9 recursive resolver array each day
#7Seems like it'd be a good addition to the Tranco list: https://tranco-list.eu/
Re: Top DNS domains seen on the Quad9 recursive resolver array each day
#8> https://github.com/Quad9DNS/quad9-domains-top500/blob/main/t... {"position": 5, "domain_name": "kxulsrwcq.com", "date": "2025-07-10"} What the https://www.ipaddress.com/website/kxulsrwcq.com/ > Safety/Trust: Unknown
More:
{"position": 26, "domain_name": "cmidphnvq.com", "date": "2025-07-10"}
{"position": 28, "domain_name": "xmqkychtb.com", "date": "2025-07-10"}
{"position": 37, "domain_name": "ezdrtpvsa.com", "date": "2025-07-10"}
{"position": 38, "domain_name": "wvdbozpfc.com", "date": "2025-07-10"}
{"position": 46, "domain_name": "bldrdoc.gov", "date": "2025-07-10"}
{"position": 52, "domain_name": "gadf99632rm.xyz", "date": "2025-07-10"}
Re: Top DNS domains seen on the Quad9 recursive resolver array each day
#9What’s up with wvdbozpfc.com? There’s a bunch of random looking domain names: cmidphnvq.com, rpqihexdb.com, facebook.com. I’d guess they for advertising?
I looked up a couple. They're cloudflare regional servers.
Re: Top DNS domains seen on the Quad9 recursive resolver array each day
#10> https://github.com/Quad9DNS/quad9-domains-top500/blob/main/t... {"position": 5, "domain_name": "kxulsrwcq.com", "date": "2025-07-10"} What the https://www.ipaddress.com/website/kxulsrwcq.com/ > Safety/Trust: Unknown
Probably some sort of command and control for a botnet.
They calculate a random domain name based on the timestamp (so it’s constantly changing every X days in case it gets seized), and have some validation to make sure commands are signed (to prevent someone name squatting to control their botnet).