Cloudflare removed Aisuru botnet domains from its top websites list after they manipulated rankings by usurping major sites like Amazon and Google. Aisuru, a growing botnet exploiting IoT devices, redirected traffic to Cloudflare's DNS services. Concerns arose over domain credibility, prompting Cloudflare to partially redact malicious domains. Experts criticized Cloudflare's ranking integrity, emphasizing the need to separate malicious domains to maintain trust. Aisuru continues to operate mainly through .su domains, raising security alarms as it impacts DNS traffic significantly.
https://krebsonsecurity.com/2025/11/cloudflare-scrubs-aisuru-botnet-from-top-domains-list/