Home / News I have a News Tip

Phishers Expand Number of Top Level Domains Abused, Policy Changes Found Effective in Prevention

Don't miss a thing – sign up for CircleID Weekly Wrap newsletter delivered to your inbox once a week.

The new Global Phishing Survey released by the Anti-Phishing Working Group (APWG) this month reveals that phishing gangs are concentrating their efforts within specific top level domains (TLDs), but also that anti-phishing policies and mitigation programs by domain name registrars and registries can have a significant and positive effect.

For this new study, covering the first half of 2008, Rod Rasmussen of Internet Identity and Greg Aaron of Afilias surveyed 47,324 unique phishing attacks located on 26,678 unique domain names. The number of TLDs abused by phishers for their attacks expanded 7 percent from 145 in H2/2007 to 155 in H1/2008. The proportion of Internet-protocol (IP) number-based phishing sites decreased 35 percent in that same period, declining from 18 percent in the second half of 2007 to 13 percent in the first half of 2008.

The full report is available for download here (press release).

Related topics: Domain Names, Registry Services, Policy & Regulation, Security, Spam, Top-Level Domains

 
   

Comments

Whois Proxy Correlation? Paul Stahura  –  Nov 25, 2008 1:18 PM PDT

Its interesting that of two TLDs - .biz and .us, which are about the same size and run by the same operator, that .us has a higher score (more phishing) than .biz, while one of the only differences between these two TLDs is the .us does not allow proxy services and .biz does.  There seems to be an inverse correlation - no proxy allowed gets more phishing - which may deserve more investigation.

Paul - that might be within statistical error limits? Suresh Ramasubramanian  –  Nov 27, 2008 3:55 AM PDT

biz and us are certainly far lower down on the list of most abused TLDs than com, cn, info ..

They used to have a much more massive problem earlier, mostly with spam sites - but that seems to have been resolved ages back.

I'm not comparing .biz to .com Paul Stahura  –  Nov 30, 2008 11:24 AM PDT

Its like running an experiement.  Try to keep as many variables constant as you can, so you can see the effect of the single variable you are changing.  .biz and .us have many variables in common, except one major variable: .us does not allow proxy whois registrations, and .us does. Thanks to this report we can compare these two TLDs when it comes to phishing. It was said that proxy whois registrations lead to more phishing.  Comparing these two very similar TLDs shows that apparently that is not the case.

I meant... Paul Stahura  –  Nov 30, 2008 11:25 AM PDT

.us does not allow proxy whois registrations, and .biz (not .us) does.

To post comments, please login or create an account.

Related Blogs

Related News

Explore Topics

Sponsored Topics

Promoted Posts

Now Is the Time for .eco

.eco launches globally at 16:00 UTC on April 25, 2017, when domains will be available on a first-come, first-serve basis. .eco is for businesses, non-profits and people committed to positive change for the planet. See list of registrars offering .eco more»

Boston Ivy Gets Competitive With Its TLDs, Offers Registrars New Wholesale Pricing

With a mission to make its top-level domains available to the broadest market possible, Boston Ivy has permanently reduced its registration, renewal and transfer prices for .Broker, .Forex, .Markets and .Trading. more»

Industry Updates – Sponsored Posts

Leading Internet Associations Strengthen Cooperation

5 Afilias Top Level Domains Now Licensed for Sale in China

Radix Announces Largest New gTLD Sale with Casino.Online

2016 Year in Review: The Trending Keywords in .COM and .NET Domain Registrations

Global Domain Name Registrations Reach 329.3 Million, 2.3 Million Growth in Last Quarter of 2016

i2Coalition to Present Tucows CEO Elliot Noss With Internet Community Leadership Award

A Look at How the New .SPACE TLD Has Performed Over the Past 2 Years

Verisign Releases Q4 2016 DDoS Trends Report: 167% Increase in Average Peak Attack from 2015 to 2016

Michele Neylon Appointed Chair Elect of i2Coalition

Neustar to be Acquired by Private Investment Group Led by Golden Gate Capital

Startup League Reports from WebSummit, Lisbon

Verisign Q3 2016 DDoS Trends Report: User Datagram Protocol (UDP) Flood Attacks Continue to Dominate

2016 U.S. Election: An Internet Forecast

.SPACE Becomes the Choice of the First Ever Space Nation Asgardia

Government Guidance for Email Authentication Has Arrived in USA and UK

ValiMail Raises $12M for Its Email Authentication Service

MarkMonitor Supports Brand Holders' Efforts Regarding .Feedback Registry

Don't Gamble With Your DNS

8 Tips to Find Your Perfect .COM Domain Name

Why .com is the Venture Capital Community's Power Player