DomainChroma: Building actionable threat intelligence from malicious domain names

•A system for deciding best defense solution for a malicious domain name is proposed.•The system relies on a new concept of malicious domain name chromatography.•The system can generate effective domain name blacklists with no collateral damage.