Phishing Activity: Domain Registrars
Quarter over Quarter Comparison
August 1, 2020 - October 31, 2020
For purposes of observing change over time, it is useful to compare measurements and metrics over successive reporting periods. Such comparisons illustrate whether phishing activities are increasing or decreasing, and where such changes are occurring. Such comparisons can identify suspicious concentrations of phishing domains reported in registrar domain portfolios, and can identify registrars where phishers flock to purchase and manage phishing domains. Investigators or policy makers may focus on these for deeper analyses.
In the table below, we use the measurement reported phishing domains to compare the rankings of registrars during the August to October 2020 period to the ranking for the May to July 2020 period.
Ranking of Domain Registrars by Phishing Domains, Quarter over Quarter (August to October 2020)
Registrars with a minimum of 30,000 domains under management and 25 phishing domains
| Domains under Management | Number of Phishing Domains | ||||||||
| Rank | Registrar | IANA ID | May to July 2020 | August to October 2020 | May to July 2020 | August to October 2020 ▼ | |||
| 1 | ▲ +1* | NameCheap, Inc. | 1068 | 10,134,100 | 10,707,889 | (+6%) | 7,839 | 14,383 | (+83%) |
| 2 | ▼ -1 | GoDaddy.com, LLC | 146 | 62,905,725 | 63,464,090 | (+1%) | 10,949 | 8,023 | (-27%) |
| 3 | — | NameSilo, LLC | 1479 | 3,339,487 | 3,531,106 | (+6%) | 6,832 | 7,434 | (+9%) |
| 4 | — | PDR Ltd. d/b/a PublicDomainRegistry.com | 303 | 4,785,785 | 4,955,491 | (+4%) | 6,085 | 3,994 | (-34%) |
| 5 | — | Tucows Domains Inc. | 69 | 10,092,551 | 10,332,030 | (+2%) | 2,874 | 2,431 | (-15%) |
| 6 | ▲ +1 | ALIBABA.COM SINGAPORE E-COMMERCE PRIVATE LIMITED | 3775 | 805,564 | 876,786 | (+9%) | 2,496 | 2,407 | (-4%) |
| 7 | ▼ -1 | Google LLC | 895 | 4,758,879 | 5,162,389 | (+8%) | 2,751 | 1,973 | (-28%) |
| 8 | ▲ +3 | Name.com, Inc. | 625 | 2,102,370 | 2,123,706 | (+1%) | 1,156 | 1,972 | (+71%) |
| 9 | ▲ +7 | Web Commerce Communications Limited dba WebNic.cc | 460 | 2,052,240 | 1,664,103 | (-19%) | 782 | 1,963 | (+151%) |
| 10 | ▲ +5 | GMO Internet, Inc. d/b/a Onamae.com | 49 | 5,349,159 | 5,160,503 | (-4%) | 858 | 1,616 | (+88%) |
| 11 | ▼ -3 | Wild West Domains, LLC | 440 | 2,745,974 | 2,756,680 | (0%) | 1,696 | 1,572 | (-7%) |
| 12 | ▼ -2 | eNom, LLC | 48 | 5,353,635 | 5,211,996 | (-3%) | 1,504 | 1,470 | (-2%) |
| 13 | ▲ +5 | Wix.com Ltd. | 3817 | 806,111 | 1,150,887 | (+43%) | 725 | 1,105 | (+52%) |
| 14 | ▼ -1 | Jiangsu Bangning Science & technology Co. Ltd. | 1469 | 614,128 | 709,071 | (+15%) | 961 | 1,085 | (+13%) |
| 15 | ▲ +6 | Register.com, Inc. | 9 | 1,713,126 | 1,702,919 | (-1%) | 539 | 993 | (+84%) |
| 16 | ▼ -2 | Registrar of Domain Names REG.RU LLC | 1606 | 907,853 | 916,075 | (+1%) | 922 | 862 | (-7%) |
| 17 | — | Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn) | 1599 | 5,575,014 | 5,249,261 | (-6%) | 759 | 748 | (-1%) |
| 18 | ▼ -6 | Hosting Concepts B.V. d/b/a Openprovider | 1647 | 790,418 | 876,214 | (+11%) | 1,075 | 694 | (-35%) |
| 19 | ▲ +9 | Internet Domain Service BS Corp | 2487 | 348,926 | 374,763 | (+7%) | 351 | 556 | (+58%) |
| 20 | ▼ -1 | FastDomain Inc. | 1154 | 2,326,277 | 2,354,139 | (+1%) | 691 | 503 | (-27%) |
* Indicates change over prior quarter
In the table below, we use the metric phishing domain score to compare the rankings of registrars during the August to October 2020 period to the ranking for the May to July 2020 period.
Ranking of Domain Registrars by Phishing Domain Score, Quarter over Quarter (August to October 2020)
Registrars with a minimum of 30,000 domains under management and 25 phishing domains
| Domains under Management | Phishing Domain Score | ||||||||
| Rank | Registrar | IANA ID | May to July 2020 | August to October 2020 | May to July 2020 | August to October 2020 ▼ | |||
| 1 | — | ALIBABA.COM SINGAPORE E-COMMERCE PRIVATE LIMITED | 3775 | 805,564 | 876,786 | (+9%) | 31 | 27.5 | (-11%) |
| 2 | ▲ +4* | TLD Registrar Solutions Ltd. | 1564 | 82,980 | 81,218 | (-2%) | 14 | 22.7 | (+62%) |
| 3 | ▼ -1 | NameSilo, LLC | 1479 | 3,339,487 | 3,531,106 | (+6%) | 20.5 | 21.1 | (+3%) |
| 4 | ▲ +45 | CloudFlare, Inc. | 1910 | 186,636 | 215,767 | (+16%) | 2.4 | 17.3 | (+633%) |
| 5 | ▲ +5 | Domainshype.com, LLC | 1660 | 32,748 | 35,093 | (+7%) | 12.2 | 15.7 | (+28%) |
| 6 | ▼ -1 | Jiangsu Bangning Science & technology Co. Ltd. | 1469 | 614,128 | 709,071 | (+15%) | 15.7 | 15.3 | (-2%) |
| 7 | ▲ +7 | Internet Domain Service BS Corp | 2487 | 348,926 | 374,763 | (+7%) | 10.1 | 14.8 | (+48%) |
| 8 | ▲ +12 | NameCheap, Inc. | 1068 | 10,134,100 | 10,707,889 | (+6%) | 7.7 | 13.4 | (+74%) |
| 9 | ▲ +2 | NETIM SARL | 1519 | 33,986 | 36,928 | (+9%) | 12.1 | 13.3 | (+10%) |
| 10 | ▼ -6 | DomainPeople, Inc. | 65 | 227,521 | 225,463 | (-1%) | 18.3 | 12.8 | (-30%) |
| 11 | N/R** | Atak Domain Hosting Internet ve Bilgi Teknolojileri Limited Sirketi d/b/a Atak Teknoloji | 1601 | 65,837 | 77,586 | (+18%) | 3.5 | 12.4 | (+254%) |
| 12 | ▲ +25 | Web Commerce Communications Limited dba WebNic.cc | 460 | 2,052,240 | 1,664,103 | (-19%) | 3.8 | 11.8 | (+210%) |
| 13 | ▲ +18 | Porkbun LLC | 1861 | 330,992 | 425,486 | (+29%) | 4.7 | 11.3 | (+143%) |
| 14 | ▼ -2 | BigRock Solutions Ltd. | 1495 | 275,493 | 278,105 | (+1%) | 10.2 | 9.9 | (-3%) |
| 15 | ▲ +2 | Wix.com Ltd. | 3817 | 806,111 | 1,150,887 | (+43%) | 9 | 9.6 | (+7%) |
| 16 | ▼ -3 | Registrar of Domain Names REG.RU LLC | 1606 | 907,853 | 916,075 | (+1%) | 10.2 | 9.4 | (-7%) |
| 17 | ▲ +11 | Name.com, Inc. | 625 | 2,102,370 | 2,123,706 | (+1%) | 5.5 | 9.3 | (+69%) |
| 18 | ▲ +4 | Ligne Web Services SARL dba LWS | 1630 | 92,704 | 101,426 | (+9%) | 6.9 | 9.2 | (+33%) |
| 19 | ▲ +10 | CV. Rumahweb Indonesia | 1675 | 111,821 | 114,201 | (+2%) | 5.5 | 8.2 | (+51%) |
| 20 | ▼ -12 | PDR Ltd. d/b/a PublicDomainRegistry.com | 303 | 4,785,785 | 4,955,491 | (+4%) | 12.7 | 8.1 | (-37%) |
* Indicates change over prior quarter
** Indicates not ranked in prior quarter; either domains under management or number of phishing domains did not meet minimum threshold for ranking
Quarter over Quarter Comparisons of:
Activity in Domain Registrars