I’d like to respond to Ching’s request for data:

It would be very helpful if the SMEs (such as NetBeason or NetCraft) & the Registrars could kindly share the following information (i.e. as required by by RAA 3.18.4) which will help ascertain to the level of effort that will actually be needed to conduct ADC:


I would submit that the number of complaints received by reporters is less relevant than those received by registrars, since we are the ones acting (and upon whom the onus of the new policy or best practices will fall). I’d also like to note that we are required to maintain records but not create them; what follows should not be understood to be readily available to any registrar and is only available to me because of an unrelated internal project.

In 2025, IANA 69, one of the four registrars my team manages, received just under 100k abuse complaints marked as “phishing” through our online forms. Note that this does not include any other type of DNS Abuse or other abuse and does not include phishing reported through different means. Fewer than 10,000 were legitimate phishing complaints. We have to sift through 90% chaff to even get to the phishing reports—and that doesn’t look at the validity of the reports in the first place.

   ────────────────────────────┼─────────
  │          Category          │ Tickets │
  ├────────────────────────────┼─────────┤
  │ TOTAL                      │ 98,212  │
  ├────────────────────────────┼─────────┤
  │    Noise                   │ 39,267  │
  ├────────────────────────────┼─────────┤
  │    Legitimate (all others) │ 58,945  │
  ├────────────────────────────┼─────────┤
  ├────────────────────────────┼─────────┤
  │ MISROUTED REQUESTS         │ 12,298  │
  ├────────────────────────────┼─────────┤
  │    Support request         │  6.142  │
  ├────────────────────────────┼─────────┤
  │    Sales inquiry           │  3,133  │
  ├────────────────────────────┼─────────┤
  │    Technical support       │  1,569  │
  ├────────────────────────────┼─────────┤
  │    Complaint, all other    │  1,454  │
  ├────────────────────────────┼─────────┤
  ├────────────────────────────┼─────────┤
  │ DOMAIN DISPUTES            │ 13,609  │
  ├────────────────────────────┼─────────┤
  │    Domain ownership        │  6,120  │
  ├────────────────────────────┼─────────┤
  │    Registry compliance     │  4,243  │
  ├────────────────────────────┼─────────┤
  │    UDRP                    │  1,828  │
  ├────────────────────────────┼─────────┤
  │    Whois issues            │    841  │
  ├────────────────────────────┼─────────┤
  │    Whois inaccuracy        │    577  │
  ├────────────────────────────┼─────────┤
  ├────────────────────────────┼─────────┤
  │ CONTENT CONCERNS           │ 15,062  │
  ├────────────────────────────┼─────────┤
  │    Hosting (non-DMCA)      │  7,833  │
  ├────────────────────────────┼─────────┤
  │    DMCA                    │  3,888  │
  ├────────────────────────────┼─────────┤
  │    Law enforcement         │  3,341  │
  ├────────────────────────────┼─────────┤
  ├────────────────────────────┼─────────┤
  │ Phishing                   │  8,291  │
   ────────────────────────────┴─────────

I hope this is helpful context for the conversation.

Servus,
Reg


--
Reg Levy | Associate General Counsel – Domains
+1 (323) 880-0831
Tucows #MakingTheInternetBetter

UTC -7