If you’re using data from URLAbuse (urlabuse.com), don’t miss our upcoming topDNS Best Practice Series webinar! 🚀
📅 Date & Time: 08 October 2025
🌐 Topic: How is DNS Abuse actually measured?
We’ll cover:
✅ The latest updates to the URLAbuse system
✅ How DNS abuse is measured in practice
✅ A first look at our brand-new platform 🎉
Speakers:
Maciej Korczynski (KOR Labs)
Sourena Maroofi (URLAbuse)
Rowena Schoo (NetBeacon Institute)
🔹 Moderated by Lars Steffen (eco – Association of the Internet Industry)
🔗 More details & registration: https://topdns.eco.de/events-archive/topdns-best-practice-series-how-is-dns-abuse-actually-measured/
If you work in cybersecurity, DNS operations, or anti-abuse, this is a great opportunity to learn, ask questions, and get a first look at what’s next.
#DNS #DNSAbuse #CyberSecurity #Infosec #Webinar #URLAbuse #topDNS
Phishing Domain Lifecycles
Phishers use a lot of domain names.
Our research shows that most phishing domains are registered by the phishers, often in bulk.
Phishers only have one purpose for these names: point them to fake pages and profit from victims lured there for as long as they can.
Investigators are constantly reporting phishing domains and these are blocklisted or shut down. Ideally, phishing domains have short lifetimes.
Is this conclusion fact or folklore?
Matt Piscitello begins a series of articles that look phishing domain lifecycles and lifetimes in https://interisle.substack.com/p/phishing-domain-lifecycles?r=59cehk
Phishing in the 2020s: What Can be Done to Reduce Phishing Attacks?
In this post we’ll look at what users can do to avoid becoming victims of phishing and, importantly, what domain name, subdomain, and hosting providers need to be doing to prevent criminals from using their services for malicious activities.
https://interisle.substack.com/p/phishing-in-the-2020s-what-can-be
You'll find more detailed recommendations in our Phishing Landscape Study
Phishing in the 2020s: Hosting Networks
In previous posts we looked at top-level domains and domain registrars that phishers most exploited over the past 5 years. In this post, we look at the hosting networks (ASNs) with the highest numbers of phishing attacks reported.
https://interisle.substack.com/p/phishing-in-the-2020s-hosting-networks
#phishing #ASN #hosting #cybercrime #dnsabuse #cybersecurity
If you like what you've been reading, subscribe.
Case study: How a single spam campaign affects service provider reputation
Matt Piscitello takes a close look at a spam campaign involving bulk registrations during the month of August 2025. He explains how #Interisle establishes evidence of bulk registration behavior, identifies what operators were affected, and discusses aspects of reputational harm resulting from the campaign.
https://interisle.substack.com/p/case-study-how-a-single-spam-campaign
#spam #bulkregistrations #dnsabuse #reputation #cybercrime #interisle
Cybercrime Activity Reported in August 2025
Interisle's monthly look at cybercrime activity during August 2025 is now posted. We point out anything that strikes us as particularly interesting in overall numbers as well as significant changes in ranking for Top Level Domains (TLDs), Registrars, and Hosting Networks.
https://interisle.substack.com/p/cybercrime-reported-in-august-2025
Phishing Landscape 2025 Report Released
Phishing Rises to New High of Nearly 2 Million Attacks over 12 Months According to New Interisle Report
Key report findings include:
Phishing attacks rose to 1.96 million a year, a 182% increase since 2021.
Domain Name Abuse Surges to New High: The total number of domain names used in phishing attacks rose 38% to over 1.5 million—the highest ever recorded.
Cybercriminal Domain Purchasing Soars: 77% of all domain names used in phishing attacks were maliciously registered by cybercriminals.
Bulk Registration Enables More Attacks: 37% of all phishing domains were acquired through bulk domain name registration services.
Over half of all phishing sites were hosted by U.S.-based companies. The U.S. has been the top hosting location for phishing for five consecutive years.
The report also examines how domain registration requirements and pricing affect phishing scores in gTLDs and ccTLDs.
https://interisle.substack.com/p/phishing-landscape-2025-report-released
Phishing Trends: May - July 2025
Results for Phishing activity for the period May 1– July 31, 2025, are now available at the Cybercrime Information Center.
Phishing activity modestly declined in in early 2025, but it returned with vengeance in the spring and early summer:
- Phishing activity more than doubled to a staggering 1.3M attacks.
- Domains reported for phishing activity nearly doubled to just over 1M.
- Malicious domain registrations increased by 81%.
We take a long, hard look at ICANN's problem child... Dominet (HK).
https://interisle.substack.com/p/phishing-trends-may-july-2025
Phishing in the 2020s: Bulk Registrations
This post continues the series that looks at aspects of phishing over the past five years.
A previous post examined malicious registration of domain names expressly for the purpose of phishing. In this post, we look at a subset of malicious domain name registratios: those domain names that were registered rapidly and in large numbers - in bulk - by phishers.
https://interisle.substack.com/p/phishing-in-the-2020s-bulk-registrations