According to a report by Knujon.com (“No Junk” spelled backwards) nearly 83 percent of all spam messages on the web can be traced back to just 10 domain registrars.
Knujon, an anti-spam outfit that aims to convince registrars to dismantle spam sites, bases its report on millions of spam messages it has collected over the past year.
While there are just over 900 accredited domain name registrars on the ICANN list, Knujon claims that a massive percentage of those spam messages originate from sites whose domain names are registered from a list of 10 registrars.
The Knujon list ranks the 10 registrars as follows:
1. XinNet Cyber Information Company Limited
3. Network Solutions
5. Planet Online
6. Regtime Ltd.
7. OnlineNIC Inc.
8. Spot Domain LLC
9. Wild West Domains
10. Hichina Web Solutions
According to an article in the Washington Post, Knujon co-founder Gareth Bruen said registrars made his list based on “the number of reported illicit domains held by the registrar; the number unsolicited messages used to advertise those domains; the percentage of illicit domains compared to the registrar’s total portfolio; the rate of unsolicited emails for the total illicit domains.” Additionally, if two registrars tied for points as a result of the above criteria, the tie was broken based on “the registrar’s volume of unlicensed online pharmacies”.
It is interesting to note that 4 of the registrars that made Knujon’s list are some of the most popular registrars around. According to registrarstats.com, eNom which occupies spot 2 in the list above has the second-largest portfolio of domains in the world. NetSol, which occupies spot 3 on Knujon’s list is the world’s fourth-largest registrar. Spot 4 in Knujon’s list is occupied by Register.com, which is the eighth largest registrar world-wide while Wild West Domains which appears ninth on the list, is seventh in terms of overall market share of domain registrations in the world.
It is also interesting to note that even though Godaddy (the number 1 domain registrar in the world according to the volume of registrars) does not occupy a spot in Knujon’s list, Wild West Domains (a Godaddy reseller service) takes up spot 9 on the list of domain registrars most favoured by spammers.
Each story has two sides to it however, and as reported in the Washington Post article, folks from eNom and domainsite.com did not speak favourable of the Knujon study when approached for commentary.
Bill Mushkin, chief executive at domainsite.com, called Bruen’s study “amazingly unscientific”, and said it fails to measure how well registrars respond to reports about spammy domains. He also indicated that while registrars have a duty under their contract with ICANN to suspend domains with blatantly false or missing data in their WHOIS contact records, they are not obligated to shut down domains advertised in spam.
“I do not believe it is our duty. It would be great for us if there were some sort of governing body that says you need to shut them down, because the downside of shutting anybody off is that if you’re wrong, you’re really screwing up someone’s life or businesses,” Mushkin said. “If it were black and white and simple and we knew for sure in each case, it would be really easy. But it’s not like that.”
eNom questioned the reliability of Knujon’s data, saying eNom investigates customers suspected of using its products and services for sending spam and if they are found to be doing the wrong thing, the company “takes appropriate action to resolve the situation.”
eNom emailed Security Fix with the following statement:
“We hope to have an opportunity to review KnuJon’s research and understand their formulas for pulling together this data, as we question their algorithm and its ability to accurately measure which registrars are fighting spam the most, or which are the most spam-friendly,”
To read the rest of this intriguing article, go here.