1. A method of determining whether at least one domain is legitimate or malicious, comprising: obtaining passive DNS query information; utilizing the passive DNS query information to measure statistical features of known malicious domain names and known legitimate domain names; and utilizing the statistical features to determine at least one reputation for at least one new domain, where the reputation indicates whether the at least one new domain is likely to be for malicious or legitimate uses.