Luke

it would be VERY interesting to see how your (Netcraft's) confirmed reporting to Reg's Registrar fares, in terms of their own determination wrt false and true positives.

If the following is out of scope, feel free to email the ccNSO TechWg open list (reading in copy) directly:

Can you share insight into your confirmation and reporting methodology?

For example is there a parseable format, or do you send more or less free form (if automated) text emails? And to whom?

Do you do any ADC yourselves after confirmation?

Would you be willing to do 20 minutes at a TechDay? For example in Seville? F2F or remote.

--
Dr. Eberhard W. Lisse \ / Obstetrician & Gynaecologist (retired)
el@lisse.NA / * | Telephone: +264 81 124 6733 (cell)
PO Box 8421 Bachbrecht \ / If this email is signed with GPG/PGP
10007, Namibia ;____/ Sect 20 of Act No. 4 of 2019 may apply

On Apr 6, 2026 at 12:49 +0200, Luke Wood via Gnso-dnsabuse-pdp <gnso-dnsabuse-pdp@icann.org>, wrote:

Reg, great idea.

Happy to contribute our data.

Over the 2025 period, Netcraft submitted 261,995 confirmed domains involved in Phishing activity to registrars and registries across the domain industry. This figure does not include the reports that were not valid. Of this figure, the vast majority has been actioned with only 0.34% outstanding. I’d be happy to provide further examples or data as needed, including specific domain examples and or how Netcraft operate, similar to previous SME presentations.

Kind Regards,

Luke Wood

[…]