Phishing Activity: Domain Registrars
Quarter over Quarter Comparison:
May 1, 2023 - July 31, 2023

For purposes of observing change over time, it is useful to compare measurements and metrics over successive reporting periods. Such comparisons illustrate whether phishing activities are increasing or decreasing, and where such changes are occurring. Such comparisons can identify suspicious concentrations of phishing domains reported in registrar domain portfolios, and can identify registrars where phishers flock to purchase and manage phishing domains. Investigators or policy makers may focus on these for deeper analyses.

In the table below, we use the measurement reported phishing domains to compare the rankings of registrars during the February 1, 2023 - April 30, 2023 period to the ranking for the May 1, 2023 - July 31, 2023 period.

Ranking of Domain Registrars by Phishing Domains, Quarter over Quarter (May to July 2023)

Registrars with a minimum of 30,000 domains under management and 25 phishing domains

Domains under Management Number of Phishing Domains
Rank Registrar IANA ID February to April 2023 May to July 2023 February to April 2023 May to July 2023 ▼
1 ▲ +1* PDR Ltd. d/b/a PublicDomainRegistry.com 303 4,429,499 4,205,319 (-5%) 15,282 18,525 (+21%)
2 ▼ -1 NameSilo, LLC 1479 4,452,651 3,521,035 (-21%) 16,068 12,035 (-25%)
3 ▲ +1 GoDaddy.com, LLC 146 65,664,751 64,115,816 (-2%) 10,282 11,308 (+10%)
4 ▼ -1 NameCheap, Inc. 1068 14,666,675 13,051,112 (-11%) 11,517 9,336 (-19%)
5 ▲ +3 eNom, LLC 48 4,239,904 4,008,803 (-5%) 3,548 5,639 (+59%)
6 ▲ +6 GMO Internet Group, Inc. d/b/a Onamae.com 49 4,353,902 3,794,400 (-13%) 3,043 4,984 (+64%)
7 ▼ -1 Google LLC 895 8,629,289 9,020,378 (+5%) 4,395 4,334 (-1%)
8 ▲ +3 NICENIC INTERNATIONAL GROUP CO., LIMITED 3765 50,833 49,925 (-2%) 3,104 4,299 (+38%)
9 — Gname.com Pte. Ltd. 1923 2,749,023 3,066,248 (+12%) 3,192 3,788 (+19%)
10 ▼ -5 Sav.com, LLC 609 1,633,675 1,226,401 (-25%) 5,821 3,687 (-37%)
11 ▼ -4 HOSTINGER operations, UAB 1636 1,145,936 1,071,089 (-7%) 4,134 3,332 (-19%)
12 ▲ +2 Tucows Domains Inc. 69 9,680,797 9,390,685 (-3%) 2,630 2,312 (-12%)
13 ▲ +3 Dynadot Inc 472 3,023,913 2,652,055 (-12%) 2,129 2,276 (+7%)
14 ▲ +36 PSI-USA, Inc. dba Domain Robot 151 1,096,391 1,044,452 (-5%) 207 2,052 (+891%)
15 ▲ +4 Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn) 1599 2,977,281 1,747,446 (-41%) 1,627 1,734 (+7%)
16 ▲ +1 Web Commerce Communications Limited dba WebNic.cc 460 813,704 706,026 (-13%) 1,971 1,706 (-13%)
17 ▲ +3 OwnRegistrar, Inc. 1250 902,935 716,182 (-21%) 1,526 1,580 (+4%)
18 ▼ -5 Chengdu West Dimension Digital Technology Co., Ltd. 1556 1,654,503 991,322 (-40%) 2,967 1,578 (-47%)
19 ▲ +4 Hosting Concepts B.V. d/b/a Registrar.eu 1647 1,223,066 1,080,725 (-12%) 1,103 1,560 (+41%)
20 ▼ -10 Registrar of Domain Names REG.RU LLC 1606 650,515 509,909 (-22%) 3,163 1,493 (-53%)

* Indicates change over prior quarter

To allow comparison of large and small gTLD registrars, we rank registrars based on a metric, phishing domain score, which is calculated by dividing the number of domain names reported for phishing in a registrar by the number of domains delegated from that registrar.

gTLD registrar Phishing Score = (number of phishing domains/domains delegated from gTLD registrar) * 10,000

This score can highlight where high-volume phishers place multiple phish on one domain.

In the table below, we use the metric phishing domain score to compare and rank registrars for the February 1, 2023 - April 30, 2023 period to the May 1, 2023 - July 31, 2023 period.

Ranking of Domain Registrars by Phishing Domain Score, Quarter over Quarter (May to July 2023)

Registrars with a minimum of 30,000 domains under management and 25 phishing domains

Domains under Management Phishing Domain Score
Rank Registrar IANA ID February to April 2023 May to July 2023 February to April 2023 May to July 2023 ▼
1 — NICENIC INTERNATIONAL GROUP CO., LIMITED 3765 50,833 49,925 (-2%) 610.6 861.1 (+41%)
2 ▲ +3* TLD Registrar Solutions Ltd. 1564 71,753 51,038 (-29%) 39.3 47.8 (+22%)
3 ▲ +7 PDR Ltd. d/b/a PublicDomainRegistry.com 303 4,429,499 4,205,319 (-5%) 34.5 44.1 (+28%)
4 ▲ +2 NameSilo, LLC 1479 4,452,651 3,521,035 (-21%) 36.1 34.2 (-5%)
5 ▲ +50 Beget LLC 3806 157,865 48,577 (-69%) 5.6 32.3 (+480%)
6 ▲ +1 HOSTINGER operations, UAB 1636 1,145,936 1,071,089 (-7%) 36.1 31.1 (-14%)
7 ▲ +1 Sav.com, LLC 609 1,633,675 1,226,401 (-25%) 35.6 30.1 (-16%)
8 ▼ -5 Registrar of Domain Names REG.RU LLC 1606 650,515 509,909 (-22%) 48.6 29.3 (-40%)
9 ▲ +7 ALIBABA.COM SINGAPORE E-COMMERCE PRIVATE LIMITED 3775 693,065 542,106 (-22%) 21.4 27.5 (+28%)
10 ▲ +10 NETIM SARL 1519 74,360 68,745 (-8%) 16.7 24.4 (+47%)
11 ▼ -9 Internet Domain Service BS Corp 2487 404,954 400,546 (-1%) 62 24.2 (-61%)
12 ▲ +1 Web Commerce Communications Limited dba WebNic.cc 460 813,704 706,026 (-13%) 24.2 24.2 (-0%)
13 ▲ +6 OwnRegistrar, Inc. 1250 902,935 716,182 (-21%) 16.9 22.1 (+31%)
14 ▼ -2 Cosmotown, Inc. 1509 158,260 221,762 (+40%) 25 21 (-16%)
15 ▲ +77 PSI-USA, Inc. dba Domain Robot 151 1,096,391 1,044,452 (-5%) 1.9 19.7 (+940%)
16 ▼ -2 Atak Domain Bilgi Teknolojileri A.Ş. 1601 286,375 258,645 (-10%) 22.2 18.6 (-16%)
17 ▲ +9 CV. Jogjacamp 1478 157,814 140,136 (-11%) 12.2 16.2 (+32%)
18 — Chengdu West Dimension Digital Technology Co., Ltd. 1556 1,654,503 991,322 (-40%) 17.9 15.9 (-11%)
19 ▲ +12 Hosting Concepts B.V. d/b/a Registrar.eu 1647 1,223,066 1,080,725 (-12%) 9 14.4 (+60%)
20 ▼ -3 Hello Internet Corp. 1924 47,815 68,825 (+44%) 18.2 14.4 (-21%)

* Indicates change over prior quarter

The final table compares and ranks gTLD registrars by malicious domain registrations.

Ranking of Domain Registrars by Malicious Domain Registrations, Quarter over Quarter (May to July 2023)

Registrars with a minimum of 30,000 domains under management and 25 phishing domains

Domains under Management Malicious Domain Registrations
Rank Registrar IANA ID February to April 2023 May to July 2023 February to April 2023 May to July 2023 ▼
1 — NameSilo, LLC 1479 4,452,651 3,521,035 (-21%) 13,715 8,743 (-36%)
2 — PDR Ltd. d/b/a PublicDomainRegistry.com 303 4,429,499 4,205,319 (-5%) 11,020 8,557 (-22%)
3 — NameCheap, Inc. 1068 14,666,675 13,051,112 (-11%) 7,720 5,279 (-32%)
4 ▲ +1* GoDaddy.com, LLC 146 65,664,751 64,115,816 (-2%) 5,079 4,996 (-2%)
5 ▲ +5 eNom, LLC 48 4,239,904 4,008,803 (-5%) 2,625 3,842 (+46%)
6 ▲ +2 NICENIC INTERNATIONAL GROUP CO., LIMITED 3765 50,833 49,925 (-2%) 2,732 3,276 (+20%)
7 ▲ +4 GMO Internet Group, Inc. d/b/a Onamae.com 49 4,353,902 3,794,400 (-13%) 2,467 3,043 (+23%)
8 ▼ -2 Google LLC 895 8,629,289 9,020,378 (+5%) 3,624 2,894 (-20%)
9 ▼ -5 Sav.com, LLC 609 1,633,675 1,226,401 (-25%) 5,185 2,866 (-45%)
10 ▲ +2 Gname.com Pte. Ltd. 1923 2,749,023 3,066,248 (+12%) 2,192 2,776 (+27%)
11 ▼ -4 HOSTINGER operations, UAB 1636 1,145,936 1,071,089 (-7%) 3,006 2,038 (-32%)
12 ▲ +32 PSI-USA, Inc. dba Domain Robot 151 1,096,391 1,044,452 (-5%) 148 1,942 (+1,212%)
13 ▲ +2 Dynadot Inc 472 3,023,913 2,652,055 (-12%) 1,479 1,367 (-8%)
14 ▼ -5 Chengdu West Dimension Digital Technology Co., Ltd. 1556 1,654,503 991,322 (-40%) 2,717 1,300 (-52%)
15 ▼ -1 Tucows Domains Inc. 69 9,680,797 9,390,685 (-3%) 1,654 1,217 (-26%)
16 ▲ +6 Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn) 1599 2,977,281 1,747,446 (-41%) 867 1,066 (+23%)
17 ▲ +2 ALIBABA.COM SINGAPORE E-COMMERCE PRIVATE LIMITED 3775 693,065 542,106 (-22%) 1,137 1,052 (-7%)
18 ▲ +5 Hosting Concepts B.V. d/b/a Registrar.eu 1647 1,223,066 1,080,725 (-12%) 828 1,025 (+24%)
19 ▼ -6 Registrar of Domain Names REG.RU LLC 1606 650,515 509,909 (-22%) 2,166 988 (-54%)
20 ▲ +1 OwnRegistrar, Inc. 1250 902,935 716,182 (-21%) 1,034 860 (-17%)

* Indicates change over prior quarter


Quarterly Update:
Registrars
Quarter over Quarter:
Key Statistics		 Quarter over Quarter:
Top Level Domains		 Quarter over Quarter:
Registrars		 Quarter over Quarter:
Hosting Networks