Methodology for the Registrar League Tables
The Registrar League Tables evaluate domain registrars based on the abuse activity associated with the domains they manage.
Calculation
- Timeframe: We consider domain-based threat signals— excluding predictive signals —received by the GSE also within the last 90 days.
- Unique Reports: We de-duplicate all signals, meaning if multiple signals point to the same domain, we count that domain as potentially abusive only once. We then calculate the total number of uniquely reported domains associated with each registrar.
- Registrar Size: We calculate the average number of domains registered with each registrar over the last 90 days. Because the ICANN Monthly Registry Reports are withheld for three months, we use the totals from the most recent released month to estimate the registrar's size.
- Report Rate: We calculate the Report Rate by dividing the number of unique reported domains by the average number of domains registered with that registrar.
- Ranking: Registrars with the lowest Report Rates rank higher in the League Table, thereby highlighting organisations who attract the fewest threat signals. We track a registrar’s report rate and relative position over time as the domain landscape evolves.
League Tiers & Grouping
- Tier One League Table: This tier includes only those registrars that manage an average of more than 50,000 domains.
- General League Table: This tier includes all Registrars regardless of size
- Regional Grouping: We use the IANA DNS Root Zone data to sort registrars into geographical regions based on the country where their administrative contact is located.