Systematic Evaluation of the Infrastructure of Free Content Websites: Network, Cloud, and Country-Level Security Analysis

We statistically examine the global distribution of free content websites (FCWs) by analyzing their hosting network scale, cloud service provider, and country-level presence, both in aggregate and across specific content categories. These measurements are contrasted with those of premium content websites (PCWs) and with general websites sampled from the Alexa top-1M. We further evaluate their security characteristics using multiple security indicators. Our findings show that FCWs and PCWs are predominantly hosted in medium-scale networks, which are strongly associated with a high concentration of malicious websites. At the cloud and country level, FCW distributions follow heavy-tailed patterns that differ from those of PCWs. Beyond static distributions, our analysis also uncovers dynamic trends, where PCWs demonstrate improving security postures over time while FCWs reveal increasing maliciousness in several categories and hosting regions. This study contributes to understanding the FCW ecosystem through comprehensive quantitative analysis. The results suggest that the harm posed by malicious FCWs can potentially be contained through effective isolation and filtering, given their concentration at the network, cloud, and country levels, and that longitudinal monitoring is essential to capture their evolving risks.