Phishing Activity: Domain Registrars
Quarter over Quarter Comparison:
August 1, 2022 - October 31, 2022

For purposes of observing change over time, it is useful to compare measurements and metrics over successive reporting periods. Such comparisons illustrate whether phishing activities are increasing or decreasing, and where such changes are occurring. Such comparisons can identify suspicious concentrations of phishing domains reported in registrar domain portfolios, and can identify registrars where phishers flock to purchase and manage phishing domains. Investigators or policy makers may focus on these for deeper analyses.

In the table below, we use the measurement reported phishing domains to compare the rankings of registrars during the May 1, 2022 - July 31, 2022 period to the ranking for the August 1, 2022 - October 31, 2022 period.

Ranking of Domain Registrars by Phishing Domains, Quarter over Quarter (August to October 2022)

Registrars with a minimum of 30,000 domains under management and 25 phishing domains

Domains under Management Number of Phishing Domains
Rank Registrar IANA ID May to July 2022 August to October 2022 May to July 2022 August to October 2022 ▼
1 ▲ +20* Sav.com, LLC 609 1,312,143 1,465,306 (+12%) 1,565 19,599 (+1,152%)
2 NameSilo, LLC 1479 4,532,558 4,507,830 (-1%) 13,371 15,919 (+19%)
3 ▼ -2 GoDaddy.com, LLC 146 66,205,047 65,778,642 (-1%) 15,248 14,971 (-2%)
4 ▼ -1 NameCheap, Inc. 1068 13,993,839 14,325,755 (+2%) 11,586 14,521 (+25%)
5 ▲ +3 Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn) 1599 3,057,716 3,216,834 (+5%) 4,668 11,783 (+152%)
6 ▼ -2 PDR Ltd. d/b/a PublicDomainRegistry.com 303 4,902,630 4,732,711 (-3%) 9,276 8,255 (-11%)
7 N/R** NICENIC INTERNATIONAL GROUP CO., LIMITED 3765 25,423 33,957 (+34%) 1,304 5,810 (+346%)
8 ▲ +12 GMO Internet, Inc. d/b/a Onamae.com 49 4,930,851 4,753,774 (-4%) 1,590 5,373 (+238%)
9 ▲ +6 eNom, LLC 48 4,558,199 4,422,183 (-3%) 2,595 4,819 (+86%)
10 OwnRegistrar, Inc. 1250 688,866 817,907 (+19%) 3,927 4,707 (+20%)
11 ▼ -6 ALIBABA.COM SINGAPORE E-COMMERCE PRIVATE LIMITED 3775 1,604,281 1,242,022 (-23%) 6,279 4,659 (-26%)
12 ▲ +4 Tucows Domains Inc. 69 10,006,921 9,778,324 (-2%) 2,256 3,779 (+68%)
13 ▲ +1 Google LLC 895 7,694,362 8,086,099 (+5%) 2,598 3,537 (+36%)
14 ▼ -5 Porkbun LLC 1861 931,876 998,854 (+7%) 4,025 3,485 (-13%)
15 ▼ -4 Registrar of Domain Names REG.RU LLC 1606 753,927 749,164 (-1%) 3,476 3,136 (-10%)
16 ▼ -9 Hosting Concepts B.V. d/b/a Registrar.eu 1647 1,706,275 1,585,107 (-7%) 5,303 2,735 (-48%)
17 ▼ -5 Hostinger, UAB 1636 742,427 877,610 (+18%) 2,686 2,309 (-14%)
18 ▲ +1 Dynadot, LLC 472 3,179,286 3,122,969 (-2%) 1,664 2,266 (+36%)
19 ▼ -1 Web Commerce Communications Limited dba WebNic.cc 460 878,532 947,972 (+8%) 1,971 2,257 (+15%)
20 ▼ -3 Name.com, Inc. 625 2,221,145 2,230,367 (0%) 2,028 1,879 (-7%)

* Indicates change over prior quarter

** Indicates not ranked in prior quarter; either domains under management or number of phishing domains did not meet minimum threshold for ranking

To allow comparison of large and small gTLD registrars, we rank registrars based on a metric, phishing domain score, which is calculated by dividing the number of domain names reported for phishing in a registrar by the number of domains delegated from that registrar.

gTLD registrar Phishing Score = (number of phishing domains/domains delegated from gTLD registrar) * 10,000

This score can highlight where high-volume phishers place multiple phish on one domain.

In the table below, we use the metric phishing domain score to compare and rank registrars for the May 1, 2022 - July 31, 2022 period to the August 1, 2022 - October 31, 2022 period.

Ranking of Domain Registrars by Phishing Domain Score, Quarter over Quarter (August to October 2022)

Registrars with a minimum of 30,000 domains under management and 25 phishing domains

Domains under Management Phishing Domain Score
Rank Registrar IANA ID May to July 2022 August to October 2022 May to July 2022 August to October 2022 ▼
1 N/R** NICENIC INTERNATIONAL GROUP CO., LIMITED 3765 25,423 33,957 (+34%) 512.9 1711 (+234%)
2 ▲ +26* Sav.com, LLC 609 1,312,143 1,465,306 (+12%) 11.9 133.8 (+1,021%)
3 ▼ -1 TLD Registrar Solutions Ltd. 1564 84,200 75,836 (-10%) 52.6 114.6 (+118%)
4 ▼ -3 OwnRegistrar, Inc. 1250 688,866 817,907 (+19%) 57 57.6 (+1%)
5 ▼ -1 Registrar of Domain Names REG.RU LLC 1606 753,927 749,164 (-1%) 46.1 41.9 (-9%)
6 ▲ +2 ALIBABA.COM SINGAPORE E-COMMERCE PRIVATE LIMITED 3775 1,604,281 1,242,022 (-23%) 39.1 37.5 (-4%)
7 ▲ +19 Cosmotown, Inc. 1509 59,024 80,013 (+36%) 12.9 37.4 (+190%)
8 ▲ +15 Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn) 1599 3,057,716 3,216,834 (+5%) 15.3 36.6 (+140%)
9 ▲ +2 NameSilo, LLC 1479 4,532,558 4,507,830 (-1%) 29.5 35.3 (+20%)
10 ▼ -4 Porkbun LLC 1861 931,876 998,854 (+7%) 43.2 34.9 (-19%)
11 ▲ +2 NETIM SARL 1519 62,616 63,214 (+1%) 25.1 32.4 (+29%)
12 ▲ +9 CNOBIN INFORMATION TECHNOLOGY LIMITED 3254 150,600 156,492 (+4%) 15.9 28.2 (+77%)
13 ▼ -4 Hostinger, UAB 1636 742,427 877,610 (+18%) 36.2 26.3 (-27%)
14 Web Commerce Communications Limited dba WebNic.cc 460 878,532 947,972 (+8%) 22.4 23.8 (+6%)
15 ▼ -10 NetEarth One Inc. d/b/a NetEarth 1005 129,041 127,154 (-1%) 44.4 23.4 (-47%)
16 ▲ +6 CV. Jogjacamp 1478 112,051 120,625 (+8%) 15.4 21.1 (+36%)
17 ▼ -1 Atak Domain Bilgi Teknolojileri A.Ş. 1601 295,207 338,316 (+15%) 19.8 19.5 (-1%)
18 Internet Domain Service BS Corp 2487 498,086 414,833 (-17%) 18.4 18.6 (+1%)
19 ▼ -7 BigRock Solutions Ltd. 1495 212,376 210,315 (-1%) 26.7 18.1 (-32%)
20 ▼ -3 PDR Ltd. d/b/a PublicDomainRegistry.com 303 4,902,630 4,732,711 (-3%) 18.9 17.4 (-8%)

* Indicates change over prior quarter

** Indicates not ranked in prior quarter; either domains under management or number of phishing domains did not meet minimum threshold for ranking

The final table compares and ranks gTLD registrars by malicious domain registrations.

Ranking of Domain Registrars by Malicious Domain Registrations, Quarter over Quarter (August to October 2022)

Registrars with a minimum of 30,000 domains under management and 25 phishing domains

Domains under Management Malicious Domain Registrations
Rank Registrar IANA ID May to July 2022 August to October 2022 May to July 2022 August to October 2022 ▼
1 ▲ +16* Sav.com, LLC 609 1,312,143 1,465,306 (+12%) 1,316 18,955 (+1,340%)
2 ▼ -1 NameSilo, LLC 1479 4,532,558 4,507,830 (-1%) 10,166 11,432 (+12%)
3 ▲ +4 Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn) 1599 3,057,716 3,216,834 (+5%) 3,695 10,578 (+186%)
4 ▼ -2 NameCheap, Inc. 1068 13,993,839 14,325,755 (+2%) 6,592 7,979 (+21%)
5 ▼ -2 GoDaddy.com, LLC 146 66,205,047 65,778,642 (-1%) 6,259 7,169 (+15%)
6 ▲ +14 GMO Internet, Inc. d/b/a Onamae.com 49 4,930,851 4,753,774 (-4%) 1,127 4,345 (+286%)
7 ▼ -1 PDR Ltd. d/b/a PublicDomainRegistry.com 303 4,902,630 4,732,711 (-3%) 5,047 4,197 (-17%)
8 ▼ -4 ALIBABA.COM SINGAPORE E-COMMERCE PRIVATE LIMITED 3775 1,604,281 1,242,022 (-23%) 5,865 3,881 (-34%)
9 N/R** NICENIC INTERNATIONAL GROUP CO., LIMITED 3765 25,423 33,957 (+34%) 1,073 3,877 (+261%)
10 OwnRegistrar, Inc. 1250 688,866 817,907 (+19%) 2,155 2,976 (+38%)
11 Google LLC 895 7,694,362 8,086,099 (+5%) 2,120 2,797 (+32%)
12 ▲ +2 eNom, LLC 48 4,558,199 4,422,183 (-3%) 1,635 2,498 (+53%)
13 ▼ -4 Porkbun LLC 1861 931,876 998,854 (+7%) 2,280 2,484 (+9%)
14 ▼ -6 Registrar of Domain Names REG.RU LLC 1606 753,927 749,164 (-1%) 2,854 2,470 (-13%)
15 ▲ +1 Tucows Domains Inc. 69 10,006,921 9,778,324 (-2%) 1,430 2,117 (+48%)
16 ▼ -3 Hostinger, UAB 1636 742,427 877,610 (+18%) 1,777 1,741 (-2%)
17 ▼ -5 Hosting Concepts B.V. d/b/a Registrar.eu 1647 1,706,275 1,585,107 (-7%) 1,809 1,390 (-23%)
18 ▲ +1 Dynadot, LLC 472 3,179,286 3,122,969 (-2%) 1,257 1,368 (+9%)
19 ▲ +30 Gname.com Pte. Ltd. 1923 1,329,943 1,893,894 (+42%) 139 1,321 (+850%)
20 ▼ -2 Web Commerce Communications Limited dba WebNic.cc 460 878,532 947,972 (+8%) 1,284 1,310 (+2%)

* Indicates change over prior quarter

** Indicates not ranked in prior quarter; either domains under management or number of phishing domains did not meet minimum threshold for ranking


Quarterly Update:
Registrars
Quarter over Quarter:
Key Statistics
Quarter over Quarter:
Top Level Domains
Quarter over Quarter:
Registrars
Quarter over Quarter:
Hosting Networks