We analyze domain names and hosting information to detect suspicious patterns. This may include unusual combinations of words, the use of numbers or symbols, or deviations in registration details.