Apparatus and Method for Predicting Malicious Domains

A computerized method for calculating the probability of a domain being malicious based on an input dataset, the method comprising:

• data extracting, including extracting from the input dataset at least two types of input data comprising:
• network data comprising one or more of WHOIS data, DNS data, Reverse PTR data, Domain Ranking data and popularity data, and Domain Authority data;
• and
• Domain Word embeddings data;
• data preprocessing, including transforming the network data from sparse to dense;
• data preprocessing, including transforming the Domain Words embeddings data into vectorial representations using a trained neural network;
• and
• processing the preprocessed network data and Domain Words embeddings data through a trained tree-based neural network to determine a probability of the domain being malicious.