Monitoring the initial DNS behavior of malicious domains. - Shuang Hao 001; Nick Feamster; Ramakant Pandrangi (Internet Measurement Conference, 2011)