Namecheap saw 116,000 phishing attacks last year

Bad guys used Namecheap to register domains associated with over 116,000 confirmed phishing attacks in 2025, according to data released by the company this week.

Across Namecheap and sister registrar Spaceship there were 432,796 reports of phishing and 116,871 of them were confirmed to be phishing attacks, according to data shared to an ICANN policy mailing list.

The stats refer to the number of tickets in the registrars’ support system, not the number of abusive domains, which logically could be lower due to double-counting or higher due to multiple domains listed in the same ticket.

The numbers are low as a percentage of the company’s domains under management — it has over 27 million DUM across its accreditations — at less than half of one percent, but pretty steep in absolute numbers.

The data was shared as part of early-stage discussions about the next wave of ICANN policy on DNS abuse.

A community working group is working on potential new rules for registrars, forcing them to conduct “Associated Domain Checks”.

That’s the idea that when a registrar confirms a domain is abusive they should check the Bad Guy’s other domains for similar abuse and yank those too, particularly if they were part of a bulk registration.

One of the many factors playing into these policy discussions is the administrative burden, and cost, that this would place on registrars. With 116,000 confirmed cases of abuse, the work-hours for abuse staff (or a potentially unreliable AI) quickly adds up.

Namecheap was named in the Anti-Phishing Working Group’s Q4 2025 report as the number one registrar abused in business email compromise attacks, a subset of phishing, with 25% of the total.

Unstoppable buys 10 new registrars

Unstoppable Domains has got 10 new registrar shell companies accredited by ICANN.

According to ICANN records, the companies UnstoppableUS1 LLC through UnstoppableUS10 LLC now have their official accreditations.

Starting off as a seller of strictly blockchain-based names, the company became a registrar of regular domains in 2024 and recently said the vast majority of its business is now in that space.

Buying up shell accreditations gives it more concurrent registry connections and is almost always a way for a registrar to become more competitive in the drop-catching services market.

ICANN cleaning house, cans four more registrars

ICANN has withdrawn the accreditations of four more long-defunct registrars, bringing this month’s terminations so far to 11.

They’re all Chinese, though they do not appear to be under common ownership. They are: Qinghai Yunnet Electronics Technology Co, Shandong Huaimi Network Technology Co, Xiamen Booksir Qiyoutong Technology Co and Xiamen Yuwang Technology Co․

What’s notable is how long it’s taken for ICANN to yank their accreditations. It’s been three or four years since Compliance opened tickets on each of them for non-payment of fees.

None of the four have any gTLD domains under management, and some don’t even seem to own their own original domains any more. One had its former web site turned into a blog in 2022. Another has its domain parked and listed for sale.

Seven registrars get terminated

ICANN has terminated the accreditations of seven registrars for not paying their fees.

Haveaname, InstantNames, MisterNIC, NetEstate, Neudomain, OpenName, and TopSystem — all under common ownership in the US — have all been given their marching orders, effective April 17.

While Compliance said it will transfer the registrars’ domains to another registrar, in practice it seems that none of them actually have any remaining domains under management.

As I previously blogged, the seven all appear to have sacrificed their DUM when they lost their .com accreditations in late 2024. That’s about the same time as ICANN stopped receiving its fees.

GoDaddy launches DomainMaxxing to optimize your domains

GoDaddy has unveiled a suite of new premium product features designed to help its customers realize the full value of their domains in increasingly competitive marketplaces.

DomainMaxxing was developed on the premise that domains aren’t merely technical assets anymore, they’re performative status objects, the company explained in a press release.

The subscription-based service adds several string-optimization techniques to the registration path, including semantic resonance analysis, geo-cultural prestige calibration and Alpha-syllable dominance enforcement, the company said.

The basic $9.99-a-month DomainMaxxing tier includes a premium serif pack, a typographic enhancement layer that renders serifs at the DNS level, as well as kerning optimization, for improved cognitive flow in the browser address bar.

“While sans-serif domains resolve 12% faster, they also convert 62% worse in enterprise contexts,” GoDaddy vice president Nick Eldime told DI.

The tier also bundles an “Awareness Pack”, also available at $1.99 a month separately, in which GoDaddy will remind registrants when their domains are about to auto-renew.

A new character integrity verification option ensures your domain “continues to contain the same letters over time”, the company said.

Pricier DomainMaxxing tiers automatically subscribe domain investors into a broker-assisted offer normalization service, built on an adaptive negotiation tone engine, to maximize domain resale value via strategic buyer discouragement.

This may include mild ridicule, disbelief, and in some cases, personalised remarks about the buyer’s net worth, social status, or spouse, Eldime explained.

Also included at the top end is a new “valet” domain parking service, where your domains are professionally escorted to their nameservers by an obsequious, white-gloved AI agent.

“Domains enrolled in DomainMaxxing are no longer merely delegated, but presented,” Eldime said.

Early beta users reported a 47% increase in inbound offers and a noticeable improvement in jawline definition, he said.

Existing GoDaddy customers will be automatically enrolled in DomainMaxxing starting April 1.

Unstoppable focuses on proper domains, admits crypto was “craze”

Unstoppable Domains is steering away from so-called “Web 3” blockchain-based naming to focus on the consensus DNS, according to a social media post from the company’s CEO.

Matt Gould tweeted on Twitter last week that the names were “part of the crypto craze in 2021” that “did not cross the chasm into mainstream usage”. Unstoppable will increase its focus on traditional domains, he wrote.

DNS domains now compose 90%+ of our business, and as we move to get several of our TLDs also listed in ICANN over the next few years our focus will continue to grow on the DNS and traditional internet market. We expect that 2-3 years from now DNS and the traditional web will be…

— Matthew Gould (@mattgould) March 16, 2026

The company’s web site now comes across like a traditional registrar. Blockchain names — once front-and-center — are still sold there, but as a non-default option in the storefront’s search results that describes such names as “wallet identifiers”.

Unstoppable says it has sold over four million blockchain names since it launched, in extensions such as .nft, .crypto and .wallet. Twitter users responding to Gould’s tweet wondered whether Unstoppable could now be described as a “grift”, “rug-pull” or “scam”.

The company has increasingly been moving towards real domains for some time, becoming accredited as an ICANN registrar in August 2024 and just last month receiving approval to act as a registry service provider in the new gTLD program.

Namecheap abandons fight for .org price caps

Namecheap seems to have thrown in the towel in its long-running fight to get ICANN to cap the prices of .org and .info domain names.

The registrar terminated its Independent Review Process complaint against ICANN back in November, with the IRP panel formally closing the case December 16, according to documents ICANN published last week.

Namecheap said it “has decided to terminate these proceedings without prejudice”, meaning it would be free to re-file the IRP at a later date. The company and ICANN have agreed to pay their own costs.

It was the second Namecheap IRP related to ICANN’s decision to remove price caps from the .org and .info registry contracts when it renewed them in 2019, bringing the two gTLDs into line with almost all other registries.

Namecheap filed its first IRP in February 2020, and scored a stonking win in 2023, with the panel ruling that ICANN had breached its bylaws and behaved in an overly secretive manner when it approved the contract renewals.

But the panel offered up remedies that gave ICANN a lot of interpretative leeway and important did not mandate the reintroduction of price caps. The second, now-defunct IRP saw Namecheap trying to force ICANN to undo its price caps decision.

It also sued ICANN in Los Angeles two years ago for essentially the same purpose, but it lost the case last July.

Since the price caps were lifted, non-profit Public Interest Registry has not raised .org prices, while for-profit Identity Digital has raised .info prices from $10.84 in 2019 to $19 today.

Seven dead registrars on the out

When a registrar stops paying its registry partners, they tend to be cut off relatively quickly. ICANN takes a bit longer.

That seems to be what’s happening to a collection of accredited registrars under the same ownership, which have been given just a few weeks to pay over a year’s worth of overdue ICANN fees or lose their ability to sell names.

ICANN Compliance is gunning for Haveaname, InstantNames, MisterNIC, NetEstate, Neudomain, OpenName, and TopSystem for non-payment of fees going back at least to September 2024.

Probably not coincidentally, that’s the same month that all seven registrars abruptly lost all of their domains under management — not much more than 1,000 per registrar — and apparently lost its .com accreditation.

According to the ICANN notice, Compliance spent the last few months of 2024 unsuccessfully attempting to get in touch with the registrars, before ignoring the case for the whole of 2025 and only returning to it this month.

The registrar web sites are all simple placeholders, with broken SSL certs, doing the bare minimum to stay in compliance with the ICANN Registrar Accreditation Agreement without actually attempting to sell any domains.

While almost all ICANN Compliance breach notices contain an allegation of unpaid fees, this is a rare instance where the allegations stop there; there’s no claim of any other breach.

“Lowest Price Guaranteed!” $48 .com registrar canned

ICANN has terminated its second registrar of the week, ending the accreditation of Hong Kong-based 0101 Internet for non-payment of fees and other infractions.

The registrar, not to be confused with the unrelated 101 Domain, will lose its ability to sell gTLD domains January 29, according to a public ICANN termination notice.

The company’s roughly 1,200 gTLD domains will be transferred to another registrar, a procedure complicated by the fact that ICANN also alleges that 0101 Internet has not been escrowing its customers’ registration data as required.

The Compliance notice spells out a timeline of alleged non-responsiveness to ICANN’s emails, phone calls, mail and faxes dating back to March 2003, almost three years ago.

0101 Internet’s web page proudly declares “Lowest Price Guaranteed!”, with .com, .net and .org priced at a measly $47.88 each, which might explain why the company’s DUM has been tumbling for over a decade.

No RDAP? No accreditation

ICANN has terminated its contract with another registrar after the company failed to implement RDAP, the Whois replacement protocol.

US-based Brennercom will be de-accredited January 28, according to a published ICANN Compliance notice.

The headline infraction is the fact that Brennercom failed to migrate to RDAP, but as is often the case the registrar owes ICANN money and has failed to publish some administrative details on its web site.

ICANN will now move Brennercom’s registered domains to a different registrar under its usual transition process.

That shouldn’t take long. While Brennercom’s web site claims to have handled customers with thousands of domains in their portfolios, my records show it has never had more than 133 domains under management. Right now, it has about 40.