Malware Activity: Domain Registrars
Quarter over Quarter Comparison
July 1, 2021 - September 30, 2021

For purposes of observing change over time, it is useful to compare measurements and metrics over successive reporting periods. Such comparisons illustrate whether malware activities are increasing or decreasing, and where such changes are occurring. Such comparisons can identify registrars where malware attackers flock to purchase and manage malware domains. Investigators or policy makers may focus on these for deeper analyses.

In the table below, we compare the number of reported malware domains under management at domain registrars for the two consecutive quarters.

Ranking of Domain Registrars by Malware Domains, Quarter over Quarter (July to September 2021)

Registrars with a minimum of 30,000 domains under management and 25 malware domains

Total Malware Domains
Rank Registrar IANA ID April to June 2021 July to September 2021 ▼
1 GoDaddy.com, LLC 146 3,372 13,309 (+295%)
2 ▲ +1* NameCheap, Inc. 1068 1,813 4,294 (+137%)
3 ▼ -1 NameSilo, LLC 1479 1,974 2,387 (+21%)
4 PDR Ltd. d/b/a PublicDomainRegistry.com 303 1,210 1,465 (+21%)
5 ▲ +3 Dynadot, LLC 472 361 1,288 (+257%)
6 eNom, LLC 48 592 784 (+32%)
7 ▼ -2 Tucows Domains Inc. 69 863 762 (-12%)
8 ▼ -1 Alibaba Cloud Computing (Beijing) Co., Ltd. 420 535 646 (+21%)
9 ▲ +5 Wild West Domains, LLC 440 165 534 (+224%)
10 ▲ +6 Internet Domain Service BS Corp 2487 154 349 (+127%)
11 ▲ +2 Network Solutions, LLC 2 166 330 (+99%)
12 ▼ -2 Name.com, Inc. 625 230 310 (+35%)
13 ▼ -1 Registrar of Domain Names REG.RU LLC 1606 180 282 (+57%)
14 ▲ +10 GMO Internet, Inc. d/b/a Onamae.com 49 111 277 (+150%)
15 ▲ +15 Porkbun LLC 1861 85 277 (+226%)
16 ▲ +7 Hosting Concepts B.V. d/b/a Registrar.eu 1647 119 276 (+132%)
17 ▼ -6 eName Technology Co., Ltd. 1331 206 259 (+26%)
18 ▲ +48 Danesco Trading Ltd. 1418 27 258 (+856%)
19 ▲ +15 Web Commerce Communications Limited dba WebNic.cc 460 70 249 (+256%)
20 ▲ +12 Sav.com, LLC 609 78 219 (+181%)

* Indicates change over prior quarter

Comparisons of:

Key Statistics

Activity in TLDs

Activity in Domain Registrars

Activity in Hosting Networks (ASNs)