McAfee names dodgiest domains

The web is awash with dangerous sites

More than five per cent of the sites on the web could cause security risks, with Cameroon's .cm domain the most dangerous, according to the third annual State of the Mal Web report from security giant McAfee, released today.

The firm scanned 27 million web sites and 104 top level domains (TLDs) using its SiteAdvisor and TrustedSource technology and judged that 5.8 per cent pose a security risk – that is more than 1.5 million risky web sites.

While not exhaustive, the report is a good snapshot of the state of malware on the web. Last year's most risky domain, Hong Kong's .hk, dropped to 34th spot following a clamp down on dubious registrations, while the world's most popular, .com, jumped from ninth to second most dangerous.

“This report underscores how quickly cyber criminals change tactics to lure in the most victims and avoid being caught. Last year, Hong Kong was the riskiest domain and this year it is dramatically safer,” said Mike Gallagher, chief technology officer for McAfee Labs.

“Cyber criminals target regions where registering sites is cheap and convenient, and poses the least risk of being caught.”

Cameroon's .cm domain has long been popular with domain name scammers, or typosquatters, who register sites with the intention of getting traffic from unsuspecting users who mistype '.com'.

These sites are either monetised with online ads or infected with malware and other potentially unwanted programs, said McAfee.

Over a third of .cm's were found to pose a security risk.