---
id: "dga"
kind: "glossary-term"
title: "DGA"
language: "en"
category: "Security and abuse"
updated: "2026-10-04T14:01:23Z"
canonical: "https://tldlog.com/glossary/dga/"
translations:
  es: "https://tldlog.com/es/glosario/dga/"
  de: "https://tldlog.com/de/glossar/dga/"
  fr: "https://tldlog.com/fr/glossaire/dga/"
  it: "https://tldlog.com/it/glossario/dga/"
  pt-BR: "https://tldlog.com/pt/glossario/dga/"
  ru: "https://tldlog.com/ru/glossariy/dga/"
  zh-Hans: "https://tldlog.com/zh/cihui/dga/"
---

# DGA

domain generation algorithm

Code inside malware that creates long lists of domain names, often random looking, from a formula. The infected machines try these names to find their controller, and the criminals register only a few of them. Defenders who work out the formula can block or register the names first.

## related terms

- [botnet](https://tldlog.com/glossary/botnet/)
- [malware](https://tldlog.com/glossary/malware/)
- [command and control domain](https://tldlog.com/glossary/c2-domain/)
- [sinkhole](https://tldlog.com/glossary/sinkhole/)
- [NRD](https://tldlog.com/glossary/nrd/)