fig1-access-count-for-malicious-domain