{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,1]],"date-time":"2026-05-01T05:43:29Z","timestamp":1777614209336,"version":"3.51.4"},"publisher-location":"Cham","reference-count":41,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783030440800","type":"print"},{"value":"9783030440817","type":"electronic"}],"license":[{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2020]]},"DOI":"10.1007\/978-3-030-44081-7_10","type":"book-chapter","created":{"date-parts":[[2020,3,17]],"date-time":"2020-03-17T12:02:38Z","timestamp":1584446558000},"page":"158-174","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":6,"title":["Counterfighting Counterfeit: Detecting and Taking down Fraudulent Webshops at a ccTLD"],"prefix":"10.1007","author":[{"given":"Thymen","family":"Wabeke","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Giovane C. M.","family":"Moura","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Nanneke","family":"Franken","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Cristian","family":"Hesselman","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2020,3,18]]},"reference":[{"key":"10_CR1","doi-asserted-by":"publisher","unstructured":"Ahi, K., Asadizanjani, N., Shahbazmohamadi, S., Tehranipoor, M., Anwar, M.: Terahertz characterization of electronic components and comparison of terahertz imaging with x-ray imaging techniques, vol. 9483, April 2015. \nhttps:\/\/doi.org\/10.1117\/12.2183128","DOI":"10.1117\/12.2183128"},{"issue":"Feb","key":"10_CR2","first-page":"281","volume":"13","author":"J Bergstra","year":"2012","unstructured":"Bergstra, J., Bengio, Y.: Random search for hyper-parameter optimization. J. Mach. Learn. Res. 13(Feb), 281\u2013305 (2012)","journal-title":"J. Mach. Learn. Res."},{"key":"10_CR3","unstructured":"Hesselman, C., Jansen, J., Wullink, M., Vink, K., Simon, M.: A privacy framework for DNS big data applications. Technical report (2014). \nhttps:\/\/www.sidnlabs.nl\/downloads\/yBW6hBoaSZe4m6GJc_0b7w\/2211058ab6330c7f3788141ea19d3db7\/SIDN_Labs_Privacyraamwerk_Position_Paper_V1.4_ENG.pdf"},{"issue":"5","key":"10_CR4","doi-asserted-by":"publisher","first-page":"1048","DOI":"10.1109\/72.788645","volume":"10","author":"H Drucker","year":"1999","unstructured":"Drucker, H., Wu, D., Vapnik, V.: Support vector machines for spam categorization. IEEE Trans. Neural Netw. 10(5), 1048\u20131054 (1999). \nhttps:\/\/doi.org\/10.1109\/72.788645","journal-title":"IEEE Trans. Neural Netw."},{"key":"10_CR5","doi-asserted-by":"crossref","unstructured":"Moura, G.C.M., Muller, M., Wullink, M., Hesselman, C.: nDEWS: a new domains early warning system for TLDs. In: IEEE\/IFIP International Workshop on Analytics for Network and Service Management (AnNet 2016), Co-Located with IEEE\/IFIP Network Operations and Management Symposium (NOMS 2016), April 2016","DOI":"10.1109\/NOMS.2016.7502961"},{"key":"10_CR6","doi-asserted-by":"publisher","unstructured":"Hao, S., Kantchelian, A., Miller, B., Paxson, V., Feamster, N.: PREDATOR: proactive recognition and elimination of domain abuse at time-of-registration. In: Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security, CCS 2016, pp. 1568\u20131579. ACM, New York (2016). \nhttps:\/\/doi.org\/10.1145\/2976749.2978317","DOI":"10.1145\/2976749.2978317"},{"key":"10_CR7","doi-asserted-by":"publisher","unstructured":"Hao, S., et al.: Understanding the domain registration behavior of spammers. In: Proceedings of the 2013 Conference on Internet Measurement Conference, IMC 2013, pp. 63\u201376. ACM, New York (2013). \nhttps:\/\/doi.org\/10.1145\/2504730.2504753","DOI":"10.1145\/2504730.2504753"},{"key":"10_CR8","doi-asserted-by":"publisher","DOI":"10.1007\/978-0-387-84858-7","volume-title":"The Elements of Statistical Learning","author":"T Hastie","year":"2009","unstructured":"Hastie, T., Tibshirani, R., Friedman, J.: The Elements of Statistical Learning. Springer, New York (2009). \nhttps:\/\/doi.org\/10.1007\/978-0-387-84858-7"},{"issue":"1","key":"10_CR9","doi-asserted-by":"publisher","first-page":"197","DOI":"10.1109\/MCOM.2017.1600521CM","volume":"55","author":"C Hesselman","year":"2017","unstructured":"Hesselman, C., Moura, G.C.M., Schmidt, R.O., Toet, C.: Increasing DNS security and stability through a control plane for top-level domain operators. IEEE Commun. Mag. 55(1), 197\u2013203 (2017). \nhttps:\/\/doi.org\/10.1109\/MCOM.2017.1600521CM","journal-title":"IEEE Commun. Mag."},{"key":"10_CR10","doi-asserted-by":"crossref","unstructured":"Hoffman, P., Sullivan, A., Fujiwara, K.: DNS terminology. RFC 8499, IETF, November 2018. \nhttp:\/\/tools.ietf.org\/rfc\/rfc8499.txt","DOI":"10.17487\/RFC8499"},{"key":"10_CR11","unstructured":"ICS: International Credit Card Services (2020). \nhttps:\/\/icscards.nl"},{"issue":"3","key":"10_CR12","doi-asserted-by":"publisher","first-page":"1166","DOI":"10.1016\/j.eswa.2014.08.046","volume":"42","author":"H Kazemian","year":"2015","unstructured":"Kazemian, H., Ahmed, S.: Comparisons of machine learning techniques for detecting malicious webpages. Expert Syst. Appl. 42(3), 1166\u20131177 (2015). \nhttps:\/\/doi.org\/10.1016\/j.eswa.2014.08.046","journal-title":"Expert Syst. Appl."},{"key":"10_CR13","doi-asserted-by":"publisher","unstructured":"Kruczkowski, M., Szynkiewicz, E.N.: Support vector machine for malware analysis and classification. In: 2014 IEEE\/WIC\/ACM International Joint Conferences on Web Intelligence (WI) and Intelligent Agent Technologies (IAT). IEEE, August 2014. \nhttps:\/\/doi.org\/10.1109\/wi-iat.2014.127","DOI":"10.1109\/wi-iat.2014.127"},{"key":"10_CR14","doi-asserted-by":"publisher","unstructured":"Lever, C., Walls, R., Nadji, Y., Dagon, D., McDaniel, P., Antonakakis, M.: Domain-Z: 28 registrations later measuring the exploitation of residual trust in domains. In: 2016 IEEE Symposium on Security and Privacy (SP), pp. 691\u2013706, May 2016. \nhttps:\/\/doi.org\/10.1109\/SP.2016.47","DOI":"10.1109\/SP.2016.47"},{"key":"10_CR15","unstructured":"Netcraft Ltd.: Netcraft, 10 October 2019. \nhttps:\/\/www.netcraft.com\/"},{"key":"10_CR16","doi-asserted-by":"publisher","unstructured":"McCoy, D., Dharmdasani, H., Kreibich, C., Voelker, G.M., Savage, S.: Priceless: the role of payments in abuse-advertised goods. In: Proceedings of the 2012 ACM Conference on Computer and Communications Security, CCS 2012, pp. 845\u2013856. ACM, New York (2012). \nhttps:\/\/doi.org\/10.1145\/2382196.2382285","DOI":"10.1145\/2382196.2382285"},{"key":"10_CR17","unstructured":"McCoy, D., et al.: PharmaLeaks: understanding the business of online pharmaceutical affiliate programs. In: Proceedings of the 21st USENIX Security Symposium. USENIX Association, Bellevue, August 2012"},{"key":"10_CR18","doi-asserted-by":"crossref","unstructured":"Mockapetris, P.: Domain names - concepts and facilities. RFC 1034, IETF, November1987. \nhttp:\/\/tools.ietf.org\/rfc\/rfc1034.txt","DOI":"10.17487\/rfc1034"},{"key":"10_CR19","doi-asserted-by":"publisher","unstructured":"Moura, G.C.M., Heidemann, J., Schmidt, R.O., Hardaker, W.: Cache me if you can: effects of DNS time-to-live. In: Proceedings of the 2019 ACM Internet Measurement Conference, October 2019. \nhttps:\/\/doi.org\/10.1145\/3355369.3355568","DOI":"10.1145\/3355369.3355568"},{"key":"10_CR20","doi-asserted-by":"publisher","unstructured":"Moura, G.C.M., Heidemann, J., M\u00fcller, M., Schmidt, R.O., Davids, M.: When the dike breaks: dissecting DNS defenses during DDoS. In: Proceedings of the ACM Internet Measurement Conference, October 2018. \nhttps:\/\/doi.org\/10.1145\/3278532.3278534","DOI":"10.1145\/3278532.3278534"},{"key":"10_CR21","unstructured":"Nieuws, R.: Dit jaar al 307 nep-webwinkels offline gehaald door politie (in Dutch), 12 December 2018. \nhttps:\/\/www.rtlnieuws.nl\/geld-en-werk\/artikel\/4520646\/dit-jaar-al-307-nep-webwinkels-offline-gehaald-door-politie"},{"key":"10_CR22","unstructured":"NOS: Consumenten voor 5 miljoen euro opgelicht via nepwinkels op sociale media (in Dutch), 12 December 2018. \nhttps:\/\/nos.nl\/artikel\/2258095-consumenten-voor-5-miljoen-euro-opgelicht-via-nepwinkels-op-sociale-media.html"},{"key":"10_CR23","unstructured":"NOS: Waar komen al die nep-webshops toch vandaan? (in Dutch), 5 May 2018. \nhttps:\/\/nos.nl\/artikel\/2230087-waar-komen-al-die-nep-webshops-toch-vandaan.html"},{"key":"10_CR24","unstructured":"Peter, H.: Gef\u00e4lschte Sneaker von der FDP? (In German) (2019). \nhttps:\/\/www.tagesschau.de\/wirtschaft\/fakeshops-plagiate-sneaker-china-101.html"},{"key":"10_CR25","doi-asserted-by":"publisher","unstructured":"Quan, L., Heidemann, J., Pradkin, Y.: When the internet sleeps: correlating diurnal networks with external factors. In: Proceedings of the 2014 Conference on Internet Measurement Conference, IMC 2014, pp. 87\u2013100. ACM, New York (2014). \nhttps:\/\/doi.org\/10.1145\/2663716.2663721","DOI":"10.1145\/2663716.2663721"},{"issue":"6","key":"10_CR26","doi-asserted-by":"publisher","first-page":"1877","DOI":"10.1109\/JSAC.2016.2558918","volume":"34","author":"R Rijswijk-Deij van","year":"2016","unstructured":"van Rijswijk-Deij, R., Jonker, M., Sperotto, A., Pras, A.: A high-performance, scalable infrastructure for large-scale active DNS measurements. IEEE J. Sel. Areas Commun. 34(6), 1877\u20131888 (2016)","journal-title":"IEEE J. Sel. Areas Commun."},{"key":"10_CR27","doi-asserted-by":"publisher","unstructured":"Roberts, R., Goldschlag, Y., Walter, R., Chung, T., Mislove, A., Levin, D.: You are who you appear to be: a longitudinal study of domain impersonation in TLS certificates. In: Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security, CCS 2019, pp. 2489\u20132504 (2019). \nhttps:\/\/doi.org\/10.1145\/3319535.3363188","DOI":"10.1145\/3319535.3363188"},{"key":"10_CR28","unstructured":"Schmidle, N.: Inside the Knockoff-Tennis-Shoe factory. The New York Times (2010). \nhttp:\/\/www.nytimes.com\/2010\/08\/22\/magazine\/22fake-t.html"},{"key":"10_CR29","unstructured":"SIDN: General terms and conditions for .nl registrants, 19 May 2019. \nhttps:\/\/www.sidn.nl\/downloads\/d_7zdiiDQvOGbSo1FGCcqw\/6d8b113b06e293bd9af55fb11a66c499\/General_Terms_and_Conditions_for_nl_Registrants.pdf"},{"key":"10_CR30","unstructured":"SIDN: Stichting internet domein nederland, 30 Ago 2019. \nhttps:\/\/sidn.nl\/en"},{"key":"10_CR31","unstructured":"Streitfeld, D.: What happens after Amazon\u2019s domination is complete? Its bookstore offers clues. New York Times, 23 June 2019. \nhttps:\/\/www.nytimes.com\/2019\/06\/23\/technology\/amazon-domination-bookstore-books.html"},{"issue":"3","key":"10_CR32","doi-asserted-by":"publisher","first-page":"293","DOI":"10.1023\/A:1018628609742","volume":"9","author":"JA Suykens","year":"1999","unstructured":"Suykens, J.A., Vandewalle, J.: Least squares support vector machine classifiers. Neural Process. Lett. 9(3), 293\u2013300 (1999). \nhttps:\/\/doi.org\/10.1023\/A:1018628609742","journal-title":"Neural Process. Lett."},{"key":"10_CR33","unstructured":"Taxation and Customs Union: Customs Union: EU customs seized over 41 million fake goods at EU borders last year (2016). \nhttps:\/\/ec.europa.eu\/taxation_customs\/node\/976_en"},{"key":"10_CR34","doi-asserted-by":"publisher","unstructured":"Tian, H., Gaffigan, S.M., West, D.S., McCoy, D.: Bullet-proof payment processors. In: 2018 APWG Symposium on Electronic Crime Research (eCrime), pp. 1\u201311, May 2018. \nhttps:\/\/doi.org\/10.1109\/ECRIME.2018.8376208","DOI":"10.1109\/ECRIME.2018.8376208"},{"key":"10_CR35","unstructured":"Turner, K.: That Chanel bag on your Instagram feed may not be a Chanel bag (2016). \nhttps:\/\/www.washingtonpost.com\/news\/the-switch\/wp\/2016\/05\/26\/that-chanel-bag-on-your-instagram-feed-may-not-be-a-chanel-bag"},{"key":"10_CR36","unstructured":"U.S. Customs and Border Protection Office of Trade: Intellectual Property Rights - Fiscal Year 2017 Seizure Statistics (2017). \nhttps:\/\/www.cbp.gov\/document\/stats\/fy-2017-ipr-seizure-statistics"},{"issue":"6","key":"10_CR37","doi-asserted-by":"publisher","first-page":"1094","DOI":"10.1093\/bjc\/azq048","volume":"50","author":"DS Wall","year":"2010","unstructured":"Wall, D.S., Large, J.: Jailhouse frocks: locating the public interest in policing counterfeit luxury fashion goods. Br. J. Criminol. 50(6), 1094\u20131116 (2010). \nhttp:\/\/ssrn.com\/abstract=1649773","journal-title":"Br. J. Criminol."},{"key":"10_CR38","doi-asserted-by":"publisher","unstructured":"Wang, D.Y., et al.: Search + Seizure: the effectiveness of interventions on SEO campaigns. In: Proceedings of the 2014 Conference on Internet Measurement Conference, IMC 2014, pp. 359\u2013372. ACM, New York (2014). \nhttps:\/\/doi.org\/10.1145\/2663716.2663738","DOI":"10.1145\/2663716.2663738"},{"key":"10_CR39","unstructured":"Wappalyzer: Identify technology on websites, 19 October 2019. \nhttps:\/\/www.wappalyzer.com\/"},{"key":"10_CR40","doi-asserted-by":"crossref","unstructured":"Wullink, M., Moura, G.C., Hesselman, C.: Dmap: automating domain name ecosystem measurements and applications. In: 2018 Network Traffic Measurement and Analysis Conference (TMA), pp. 1\u20138. IEEE, June 2018","DOI":"10.23919\/TMA.2018.8506521"},{"key":"10_CR41","doi-asserted-by":"crossref","unstructured":"Wullink, M., Moura, G.C., M\u00fcller, M., Hesselman, C.: ENTRADA: a high-performance network traffic data streaming warehouse. In: 2016 IEEE\/IFIP Network Operations and Management Symposium (NOMS), pp. 913\u2013918. IEEE, April 2016","DOI":"10.1109\/NOMS.2016.7502925"}],"container-title":["Lecture Notes in Computer Science","Passive and Active Measurement"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-44081-7_10","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2020,3,23]],"date-time":"2020-03-23T00:08:45Z","timestamp":1584922125000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-030-44081-7_10"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020]]},"ISBN":["9783030440800","9783030440817"],"references-count":41,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-44081-7_10","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020]]},"assertion":[{"value":"18 March 2020","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"PAM","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Passive and Active Network Measurement","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Eugene, OR","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"USA","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2020","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"30 March 2020","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"31 March 2020","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"21","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"pam2020","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/pam2020.cs.uoregon.edu\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Single-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"JEMS","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"65","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"19","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"0","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"29% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"4","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"5-6","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}