Home // CYBER 2025, The Tenth International Conference on Cyber-Technologies and Cyber-Systems // View article

The Domain Name Life Cycle as an Attack Surface: Systematic Threat Mapping and Defense Recommendations

Authors:
Thomas Fritzler
Michael Massoth

Keywords: Domain Life Cycle; Domain Security; Domain Management; Expired Domains; Cybersecurity Best Practices.

Abstract:
This paper presents a phase-based security analysis of the domain-name life cycle - pre-registration, active registration, expiry, and malicious re-registration. Synthesizing peer-reviewed studies, documented incidents, and current threat intelligence (2014-2025), we map key attack vectors (for example typosquatting, dangling records, registrar compromise, expired-domain abuse) to concrete mitigations (registrar hardening, zone hygiene, renewal governance). The result is a concise model and a threat-to-control table aimed at practitioners in enterprises and registrars. This is a conceptual, literature-based synthesis; no new measurements are introduced. We argue that domain names are critical security assets that require continuous management across technical and administrative controls.

Pages: 1 to 7

Copyright: Copyright (c) IARIA, 2025

Publication date: September 28, 2025

Published in: conference

ISSN: 2519-8599

ISBN: 978-1-68558-295-1

Location: Lisbon, Portugal

Dates: from September 28, 2025 to October 2, 2025