{"id":10590,"date":"2026-08-27T19:10:43","date_gmt":"2026-08-27T23:10:43","guid":{"rendered":"https:\/\/hostingdiscussion.com\/news\/?p=10590"},"modified":"2026-08-27T18:56:48","modified_gmt":"2026-08-27T22:56:48","slug":"one-in-ten-new-domains-this-year-turned-out-to-be-malicious","status":"publish","type":"post","link":"https:\/\/hostingdiscussion.com\/news\/one-in-ten-new-domains-this-year-turned-out-to-be-malicious\/","title":{"rendered":"One in ten new domains this year turned out to be malicious"},"content":{"rendered":"<p dir=\"ltr\"><a href=\"https:\/\/interisle.net\/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">Interisle Consulting Group<\/a> counted roughly 85 million new <a href=\"https:\/\/hostingdiscussion.com\/news\/14-years-later-icann-is-accepting-new-domain-extension-applications-again\/\">gTLD domains<\/a> registered in 2025. By mid-May, blocklists had flagged 8.5 million of them, or one in ten. Even so, Interisle calls that a floor, not a ceiling, and projects the real number sold to malicious actors could reach 16.8 million, closer to one in five.<\/p>\n<p dir=\"ltr\">The abuse isn&#8217;t spread evenly, either. Five registrars, for instance, accounted for half of all blocklisted domains in the report&#8217;s dataset, and individual rates swing wildly from there: <a href=\"https:\/\/hostingdiscussion.com\/news\/godaddy-lets-ai-agents-buy-domains-with-real-guardrails\/\">GoDaddy<\/a> sits at 4.7%, Gname at 40.2%, and NICENIC at 87.6% of its own new registrations. Most of that volume, an estimated 88%, arrived in bulk, meaning buyers registered the domains in batches with barely any gap between purchases. In one striking case, GMO Internet Group created 10,848 domains in just over five hours, all algorithmically generated strings in the .BOND extension.<\/p>\n<p dir=\"ltr\"><a href=\"https:\/\/hostingdiscussion.com\/news\/icann-opens-narrow-door-for-blockchain-names-to-join-the-real-internet\/\">ICANN<\/a>, meanwhile, pushed back on 10 August. Its technical staff argued blocklist data show reports of suspicious activity rather than confirmed abuse, and that such figures &#8220;at best form an upper limit.&#8221; The organization also flagged Interisle&#8217;s methodology as diverging from ICANN&#8217;s own published approach, though it didn&#8217;t explain how or why.<\/p>\n<p dir=\"ltr\">Even so, what the report makes harder to dismiss sits buried in its own numbers. <a href=\"https:\/\/hostingdiscussion.com\/news\/web-com-shuts-down-as-newfold-digital-consolidates-customers-under-network-solutions\/\">Newfold Digital<\/a>, which owns Network Solutions and Register.com among hundreds of other registrars, kept its abuse rate at 3.9%, for example. Tucows, similarly, landed at 3.0%. Both, in other words, grew their businesses without anywhere near the exposure seen at the high end of the report&#8217;s rankings.<\/p>\n<p dir=\"ltr\">Interisle ties the wider pattern to pricing, too. Cheap first-year deals, wholesale discounts, and rebates that reward registrars for hitting growth targets all pull in customers who rarely renew, and cybercriminals fit that profile closely, which helps explain why renewal rates in the worst-affected extensions drop as low as 0.5%. As the report puts it, if those sales lost money consistently, providers would have already changed course.<\/p>\n<p dir=\"ltr\">Ultimately, ICANN disputes the scale and the method behind these figures. It doesn&#8217;t, though, dispute that some registrars run cleaner books than others, and that gap, in the end, is where the real story sits.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Interisle Consulting Group counted roughly 85 million new gTLD domains registered in 2025. By mid-May, blocklists had flagged 8.5 million of them, or one in ten. Even so, Interisle calls that a floor, not a ceiling, and projects the real number sold to malicious actors could reach 16.8 million, closer to one in five. The [&hellip;]<\/p>\n","protected":false},"author":20624,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[7884,7880,7883,7882,7881],"class_list":["post-10590","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-cybercrime-domains","tag-domain-abuse-report","tag-gtld-registrations","tag-icann-blocklist-dispute","tag-interisle-consulting-group"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v23.2 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>One in ten new domains this year turned out to be malicious - Web Hosting News<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/hostingdiscussion.com\/news\/one-in-ten-new-domains-this-year-turned-out-to-be-malicious\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"One in ten new domains this year turned out to be malicious - Web Hosting News\" \/>\n<meta property=\"og:description\" content=\"Interisle Consulting Group counted roughly 85 million new gTLD domains registered in 2025. By mid-May, blocklists had flagged 8.5 million of them, or one in ten. Even so, Interisle calls that a floor, not a ceiling, and projects the real number sold to malicious actors could reach 16.8 million, closer to one in five. The [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/hostingdiscussion.com\/news\/one-in-ten-new-domains-this-year-turned-out-to-be-malicious\/\" \/>\n<meta property=\"og:site_name\" content=\"Web Hosting News\" \/>\n<meta property=\"article:published_time\" content=\"2026-08-27T23:10:43+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-27T22:56:48+00:00\" \/>\n<meta name=\"author\" content=\"Justine Juyad\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Justine Juyad\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/hostingdiscussion.com\/news\/one-in-ten-new-domains-this-year-turned-out-to-be-malicious\/\",\"url\":\"https:\/\/hostingdiscussion.com\/news\/one-in-ten-new-domains-this-year-turned-out-to-be-malicious\/\",\"name\":\"One in ten new domains this year turned out to be malicious - Web Hosting News\",\"isPartOf\":{\"@id\":\"https:\/\/hostingdiscussion.com\/news\/#website\"},\"datePublished\":\"2026-08-27T23:10:43+00:00\",\"dateModified\":\"2026-08-27T22:56:48+00:00\",\"author\":{\"@id\":\"https:\/\/hostingdiscussion.com\/news\/#\/schema\/person\/3a1732732b90f8c57c2a0ec68d3c49e3\"},\"breadcrumb\":{\"@id\":\"https:\/\/hostingdiscussion.com\/news\/one-in-ten-new-domains-this-year-turned-out-to-be-malicious\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/hostingdiscussion.com\/news\/one-in-ten-new-domains-this-year-turned-out-to-be-malicious\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/hostingdiscussion.com\/news\/one-in-ten-new-domains-this-year-turned-out-to-be-malicious\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/hostingdiscussion.com\/news\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"One in ten new domains this year turned out to be malicious\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/hostingdiscussion.com\/news\/#website\",\"url\":\"https:\/\/hostingdiscussion.com\/news\/\",\"name\":\"Web Hosting News\",\"description\":\"Cloud and web hosting industry daily news\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/hostingdiscussion.com\/news\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/hostingdiscussion.com\/news\/#\/schema\/person\/3a1732732b90f8c57c2a0ec68d3c49e3\",\"name\":\"Justine Juyad\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/hostingdiscussion.com\/news\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/96df33d01870f85226adf8492251fbefe00bc349b10bb7679b094f3fa086999c?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/96df33d01870f85226adf8492251fbefe00bc349b10bb7679b094f3fa086999c?s=96&d=mm&r=g\",\"caption\":\"Justine Juyad\"},\"description\":\"HostingDiscussion.com senior reporter\",\"sameAs\":[\"https:\/\/hostingdiscussion.com\/news\/\"],\"url\":\"https:\/\/hostingdiscussion.com\/news\/author\/justine-juyad\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"One in ten new domains this year turned out to be malicious - Web Hosting News","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/hostingdiscussion.com\/news\/one-in-ten-new-domains-this-year-turned-out-to-be-malicious\/","og_locale":"en_US","og_type":"article","og_title":"One in ten new domains this year turned out to be malicious - Web Hosting News","og_description":"Interisle Consulting Group counted roughly 85 million new gTLD domains registered in 2025. By mid-May, blocklists had flagged 8.5 million of them, or one in ten. Even so, Interisle calls that a floor, not a ceiling, and projects the real number sold to malicious actors could reach 16.8 million, closer to one in five. The [&hellip;]","og_url":"https:\/\/hostingdiscussion.com\/news\/one-in-ten-new-domains-this-year-turned-out-to-be-malicious\/","og_site_name":"Web Hosting News","article_published_time":"2026-08-27T23:10:43+00:00","article_modified_time":"2026-08-27T22:56:48+00:00","author":"Justine Juyad","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Justine Juyad","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/hostingdiscussion.com\/news\/one-in-ten-new-domains-this-year-turned-out-to-be-malicious\/","url":"https:\/\/hostingdiscussion.com\/news\/one-in-ten-new-domains-this-year-turned-out-to-be-malicious\/","name":"One in ten new domains this year turned out to be malicious - Web Hosting News","isPartOf":{"@id":"https:\/\/hostingdiscussion.com\/news\/#website"},"datePublished":"2026-08-27T23:10:43+00:00","dateModified":"2026-08-27T22:56:48+00:00","author":{"@id":"https:\/\/hostingdiscussion.com\/news\/#\/schema\/person\/3a1732732b90f8c57c2a0ec68d3c49e3"},"breadcrumb":{"@id":"https:\/\/hostingdiscussion.com\/news\/one-in-ten-new-domains-this-year-turned-out-to-be-malicious\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/hostingdiscussion.com\/news\/one-in-ten-new-domains-this-year-turned-out-to-be-malicious\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/hostingdiscussion.com\/news\/one-in-ten-new-domains-this-year-turned-out-to-be-malicious\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/hostingdiscussion.com\/news\/"},{"@type":"ListItem","position":2,"name":"One in ten new domains this year turned out to be malicious"}]},{"@type":"WebSite","@id":"https:\/\/hostingdiscussion.com\/news\/#website","url":"https:\/\/hostingdiscussion.com\/news\/","name":"Web Hosting News","description":"Cloud and web hosting industry daily news","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/hostingdiscussion.com\/news\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/hostingdiscussion.com\/news\/#\/schema\/person\/3a1732732b90f8c57c2a0ec68d3c49e3","name":"Justine Juyad","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/hostingdiscussion.com\/news\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/96df33d01870f85226adf8492251fbefe00bc349b10bb7679b094f3fa086999c?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/96df33d01870f85226adf8492251fbefe00bc349b10bb7679b094f3fa086999c?s=96&d=mm&r=g","caption":"Justine Juyad"},"description":"HostingDiscussion.com senior reporter","sameAs":["https:\/\/hostingdiscussion.com\/news\/"],"url":"https:\/\/hostingdiscussion.com\/news\/author\/justine-juyad\/"}]}},"views":107,"_links":{"self":[{"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/posts\/10590","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/users\/20624"}],"replies":[{"embeddable":true,"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/comments?post=10590"}],"version-history":[{"count":1,"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/posts\/10590\/revisions"}],"predecessor-version":[{"id":10591,"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/posts\/10590\/revisions\/10591"}],"wp:attachment":[{"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/media?parent=10590"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/categories?post=10590"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/tags?post=10590"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}