October DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsClean PCRecommendedOne scan can reveal what keeps slowing WindowsLook for cleanup and repair opportunities.Run ScanOctober DealsAmazon USDeal season is back - check today's better picksAmazon US: current deals, useful picks and tech finds.See Picks×
Skip to content
The Finance Base
The Money Desk · Blog
Re:

Amazon’s Alexa Ranking Service Shutdown Left Cybersecurity Teams Without a Familiar Signal

Alexa Internet’s domain-ranking service retired in 2022. Its shutdown removed a familiar popularity signal for cybersecurity teams, but no public ranking list is a universal replacement.
From TheFinanceBase Team4 min to read
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Amazon retired Alexa Internet’s domain-ranking service in 2022, ending a familiar source of web-popularity data that cybersecurity teams had used as one clue when distinguishing legitimate domains from threats. No single public list is a drop-in replacement: rankings reflect their data sources, networks, regions and measurement periods, so security teams should choose evidence that fits their own users and workflow.

What happened to Alexa rankings?

Alexa Internet’s domain-ranking service—not Amazon’s Alexa voice assistant—announced its retirement on December 8, 2021, according to a 2024 Internet Measurement Conference paper. The paper says the Alexa Top 1 Million list was scheduled to retire on May 1, 2022, and that the web portal did retire that day. Its CSV endpoint reportedly remained active and updating until 2023. Akamai also dates the announcement to December 2021 and the permanent retirement to May 2022.

As an Amazon Associate I earn from qualifying purchases.

The service had published domain-popularity rankings for more than 25 years. The available sources establish the retirement and its operational context, but not Amazon’s reason for closing the service.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

2024 Internet Measurement Conference paper · Akamai, “Improving Popularity Rankings for Better Threat Intelligence, Part 1”

#1 Best Overall
TrustKernel PlugMate Hardware-Isolated Secure Android Computing Device
  • Hardware-Isolated Android Computing Environment: Powered by the independently developed PlugOS secure operating system, PlugMate features a MediaTek Helio G80 octa-core processor, 4GB RAM, and 128GB of fully encrypted storage, creating a completely independent Android computing environment.Built with its own dedicated processor, memory, and full-disk encrypted storage, PlugMate physically isolates your applications, files, credentials, network data, and sensitive information from the connected host device. Your phone, tablet, or computer functions only as the display and input interface, while all data remains securely stored and processed entirely within PlugMate.
  • True Plug & Play Cross-Platform Compatibility: Compatible with Windows, macOS, Linux, Android, and iOS. Simply connect PlugMate to instantly access your independent Android workspace without complicated configuration.Securely manage files, access documents, and work across multiple platforms anytime and anywhere from a single portable device.
  • Built for Digital Security & Privacy: Before PlugMate starts, it automatically verifies the trust status of the connected host device in the background, followed by user identity authentication. Access is granted only when both security checks are successfully completed, ensuring that only authorized users can access PlugMate on trusted devices.
  • System-Level Network Security Management: An integrated system-level firewall provides comprehensive visibility and control over network traffic, application permissions, and background processes.Monitor network activity, manage application behavior, and maintain greater transparency over your device’s security and privacy status.
  • Advanced Anti-Tracking & Privacy Protection: Virtualized sensor technology gives users greater control over location services, device identifiers, and other sensitive information. Combined with PlugMate’s hardware-isolated architecture, it helps reduce device fingerprinting and enhances privacy protection when using public Wi-Fi and other untrusted networks.

Why cybersecurity teams used a popularity list

A domain’s popularity can help indicate that it is likely legitimate, which matters when security teams maintain blocklists. Blocking a heavily used legitimate resource can disrupt customers, employees or internet subscribers. Akamai’s researchers describe using Alexa data as one input when evaluating domains and reducing false positives—not as a standalone test of safety. They also describe using other allowlisting controls and validating artifacts with both malicious and legitimate signals. As Akamai authors Noy Aizenberg and Congcong Xing put it, “Popularity rank is an important factor in assessing the legitimacy of domains.”

Popularity alone does not establish that a domain is safe. A frequently visited domain can still be compromised or malicious, while a little-known domain can be legitimate. Treat a rank as supporting context alongside threat intelligence and other controls.

Why one replacement list may not fit every security team

Rankings describe the traffic their collectors observe; different collection methods can produce different lists. Akamai cautions that a worldwide list may not reflect popularity in a particular country, and that rankings based mainly on HTTP transactions may miss DNS server domains. A global web-traffic ranking may therefore be a poor proxy for what is common on a regional network or in a DNS-focused security workflow.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Infoblox says it stopped using Alexa years earlier because it found statistical issues that made the lists unreliable for its own use cases. That is Infoblox’s account of its experience, not evidence that Alexa was unsuitable for every organization. Infoblox recommends using a list generated from your own network traffic, or from similar traffic, where possible; it says public rankings should inform workflow decisions rather than dictate them.

What Infoblox’s 2022 comparison found—and what it did not

Infoblox published a bounded analysis using a random subset of its active high-threat second-level domains from its Threat Intelligence Data Exchange and public top-one-million lists. The comparison was made on May 27, 2022, and considered approximately 1.6 million domains. The counts below are the number of Infoblox active high-threat domains present in each public list; overlap percentages compare each public list with Infoblox’s own top one million for the named network view.

Public list Infoblox active high-threat domains found (2022 analysis) Overlap with Infoblox DNS forwarding proxy top one million Overlap with Infoblox BloxOne client top one million
Alexa 2,118 24% 35%
Cisco Umbrella 1,970 19% 27%
Majestic 4,757 26% 35%
Tranco 6,354 34% 45%

These are Infoblox’s findings for its described sample and network views, not a universal measure of ranking accuracy, safety or present-day list quality. Infoblox’s broader point was that public lists had limited overlap with its own network views and that domain rankings are network-specific. It also cautioned that combining lists does not automatically make them better or easier to interpret.

Rank #4
Adobe Acrobat Pro + McAfee Total Protection 5-Device Software Bundle | Create, Edit, E-Sign PDFs | Antivirus Software, Scam Protection, Identity Monitoring | 12-Month Subscription | Digital Download
  • EXCLUSIVE AMAZON BUNDLE - Securely create, edit, and share PDFs with Adobe Acrobat Pro. Secure your pc and personal information against advanced threats, frauds, and scams with McAfee Total Protection. Introductory offer for new users
  • ULTIMATE TOOL FOR CREATIVING – Create and edit PDFs. Collaborate with ease. E-sign documents and collect signatures. Get everything done in one app, wherever you go
  • REVISIONS - Edit text and images without jumping to another app.
  • ELECTRONIC SIGNATURES - E-sign documents or request e-signatures on any device. Recipients don’t need to log in to esign.
  • CONVERT PDFs - Convert your pdf files to editable Microsoft Word, Excel, or PowerPoint documents.

Infoblox’s June 22, 2022 comparison and discussion

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

How to choose evidence after Alexa

  1. Define the decision. Identify whether the list will help triage a domain, tune a blocklist, reduce false positives or support another security task. Popularity is supporting evidence, not an automatic allow or block rule.
  2. Match the data source to the traffic. Ask whether a ranking is based on browser or HTTP observations, DNS observations, or a blend. Those methods can represent different domains and use patterns.
  3. Check geographic and network fit. Consider whether the list reflects the country, ISP, enterprise or customer population whose activity you need to evaluate. Your own network or a comparable one may be more relevant than a global ranking.
  4. Check which entities and activity are covered. Determine whether the data captures second-level domains, hostnames or DNS infrastructure, and whether it observes the traffic relevant to your workflow.
  5. Account for rank uncertainty and change. A single rank can conceal uncertainty or movement over time. Infoblox describes its InfoRanks as providing a likely rank and an interval, one example of presenting uncertainty rather than only a point value.
  6. Validate before changing enforcement. Combine popularity evidence with threat intelligence and other controls, and consider the cost of a false positive in the environment where a block would apply.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

What alternatives are available?

Infoblox discusses Cisco Umbrella, Majestic, Tranco and its own InfoRanks; it says InfoRanks are provided to customers through its service portal. Akamai describes AkaRank, developed using its own data alongside anonymized DNS and partner traffic to create regional popularity views. These are examples of different vendor approaches, not a verified current comparison of availability or terms, and none is established as the definitive successor to Alexa.

For security teams, the practical choice is not simply “Which list replaced Alexa?” It is “Which traffic and entities does this list represent, and how well do they match the decision I need to make?” Public rankings can be useful context, but the evidence should fit the network and be checked against other security signals.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More post from the Money Desk

  1. The Money DeskBlogTheFinanceBase09 OCT 267 minMortgage Escrow FAQs: Taxes, Insurance, Shortages, and Refunds
  2. The Money DeskBlogTheFinanceBase09 OCT 265 minHow Mortgage Escrow Accounts Work and What Homeowners Pay For
  3. The Money DeskBlogTheFinanceBase09 OCT 265 minHow to Read a Stock Chart, Volume and Market-Cap Data
Recommended PC Tool
Recommended PC Tool
PC Slower Than It Used to Be?Free scan - under a minute
Outdated Drivers Are Slowing You DownFree scan - exact matches

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.