The World's Most Abused Domain Registrars
Among the reasons spam, malware and other threats continue to plague the internet is that abusers find it easy to obtain an endless supply of domain names. Some gTLD and ccTLD resellers (called registrars) sell large volumes of domains to professional spammers and other miscreants for profit. Some registrars have been directly owned and operated by abusers, while others simply do not do enough to stop or limit bad guys' access to an unlimited supply of domains. Abusers destroy the reputation of those domains (and along with them, possibly the reputation of registrars and registries) and just move on to new ones in a vicious cycle.
A registrar may be "bad" in two ways. On one side, the ratio of bad to good domains may be higher than average, indicating that the registrar could do a better job of enforcing policies and shunning abusers. However, some registrars with a high fraction of bad domains may be quite small businesses, and their total number of bad domains could be relatively limited with respect to other registrars. Their total "badness" to the Internet is limited by their small total size.
The other side is that some large registrars may have a large number of bad domains as a result of the sheer size of their domain corpus. Even if their corrective measures are effective, they still constitute a problem on the global scale, and they could assign further resources to improve their anti-abuse processes and bring down the overall number of bad domains.
In defining a "badness" index, we decided to weight in both these factors. With a certain amount of arbitrariness—and at the same time a desire to avoid excessive complications—we defined badness as:
where
- Db is the number of bad domains detected
- Dt is the number of active domains observed
You can think of this number as the bad domains fraction weighted with the registrar's size, or as the order of magnitude of the problem weighted with the effectiveness of anti-abuse policies. Presented this way, this data more closely matches the perceptions Spamhaus staff has in dealing with this issue in a daily production basis. We hope that this definition helps to spotlight registrars that in one way or another can be considered problematic, in a fair way.
These data represent domains seen by Spamhaus systems, and not a registrar's total domain corpus. Domains in this data are in active use, showing up in mail feeds and related DNS traffic within the last 30 days. Other domains may be parked or used for traffic outside of our systems' focus, and those domains are not included in this summary.
The registrars listed on this page provide spammers and other miscreants with a service they need in order to survive. Many, even most, registrars succeed, by and large, in keeping abusers off their systems and work to maintain a positive reputation. That success shows that these ten worst could, if they tried, "keep clean" by turning spammers and other abusers away.
Source: Spamhaus (DBL) database. Data is compiled automatically from the DBL database using the percentage of DBL listed domains for each registrar.
|
| The 10 Most Abused Domain Registrars |
| As of 01 June 2023 the registrars with the worst reputations for spam domains are: |
|
1
|
nicenic.net (ZhuHai NaiSiNiKe Information Technology) |
Badness Index: 2.86
Domains seen: 2,983
Bad domains: 1,203 (40.3%)
|
|
2
|
59.cn (Zhengzhou Century / 郑州世纪创联电子科技开发有限公司) |
Badness Index: 2.81
Domains seen: 2,064
Bad domains: 859 (41.6%)
|
|
3
|
Spaceship, Inc. |
Badness Index: 2.52
Domains seen: 6,113
Bad domains: 2,024 (33.1%)
|
|
4
|
Now.cn/广东时代互联 |
Badness Index: 2.14
Domains seen: 2,063
Bad domains: 678 (32.9%)
|
|
5
|
Danesco Trading Ltd. |
Badness Index: 2.10
Domains seen: 1,794
Bad domains: 590 (32.9%)
|
|
6
|
nawang.cn (Network Technology / 厦门纳网科技有限公司) |
Badness Index: 1.86
Domains seen: 1,410
Bad domains: 433 (30.7%)
|
|
7
|
OwnRegistrar / Trunkoz |
Badness Index: 1.22
Domains seen: 6,130
Bad domains: 1,070 (17.5%)
|
|
8
|
Aceville Pte. Ltd. |
Badness Index: 0.85
Domains seen: 3,341
Bad domains: 464 (13.9%)
|
|
9
|
SPRINTNAMES-RU |
Badness Index: 0.85
Domains seen: 1,053
Bad domains: 173 (16.4%)
|
|
10
|
WebNic.cc (Web Commerce Communications) |
Badness Index: 0.78
Domains seen: 13,368
Bad domains: 1,438 (10.8%)
|
|
