Resources
The Institute strives to serve as a resource for all interested stakeholders fighting DNS Abuse, whether they are registries, registrars, security researchers, or any other interested party.
The Institute is pleased to provide and maintain a Resource Library on publications related to DNS Abuse. These documents advance the conversation regarding DNS Abuse and help educate registries and registrars as to how to address it. These resources also may prove useful to someone that wants to learn more about DNS Abuse and how to tackle it.
> Filter Resources
Filter By Tags
Filter By Category
NetBeacon Institute – 2025 Year in Review
Time seems to move incredibly quickly at the Institute, most likely a function of the volume of activity we’re engaged in. As 2025 winds down
A Holistic Approach to Tackling DNS Abuse for Registries and Registrars
In September 2023, ICANN hosted the DNS Symposium in Da Nang, Vietnam. This included a ‘Day of DNS Abuse Discussions’ with a comprehensive agenda. This
Challenges in Measuring DNS Abuse
From the creation of NetBeacon Measurement and Analytics Platform (MAP), we knew that measuring DNS Abuse* would be difficult and that it would be beneficial
Introducing Compass Dashboards
The NetBeacon Institute is pleased to announce the general availability of NetBeacon Measurement and Analytics (MAP): Dashboards to help domain registrars and registries to better
A New Phase of Measuring DNS Abuse
The Institute launches a new level of reporting that reveals the spectrum of how malicious phishing and malware is distributed across the DNS registration ecosystem.
Technical Resources for Combating DNS Abuse
The NetBeacon Institute serves as a resource for all interested stakeholders fighting DNS Abuse, whether they are registries, registrars, security researchers, or any other interested
DNSAI Releases 2022 Annual Report
The 2022 DNSAI Annual Report is available! Read about the important progress we have made to report DNS Abuse and share helpful information with our community.
DNSAI Bulletin 2023-04: Account Take-Overs
This DNSAI Bulletin is intended to help identify and prevent a recent increase in account take-overs at retail registrars across the industry.
DNSAI Compass: Six Months of Measuring Phishing and Malware
The DNS Abuse Institute recently published our sixth monthly report for DNSAI Compass, an initiative to measure the use of the DNS for phishing and malware.
Introducing NetBeacon MAP: Individual Dashboards Version 2.0.0
The NetBeacon Institute is pleased to announce updated NetBeacon Measurement and Analytics Platform (MAP) Individual Dashboards for registries and registrars. Version 2.0.0 provides more actionable
Criminals are exploiting the UK’s Winter Fuel Payment – this is how global industry collaboration is tackling it
A joint blog: Mayuresh Walke, Nominet, and Rowena Schoo, NetBeacon Institute Nominet sits on the NetBeacon Institute Advisory Council – working together to reduce DNS
NetBeacon Institute – 2025 Year in Review
Time seems to move incredibly quickly at the Institute, most likely a function of the volume of activity we’re engaged in. As 2025 winds down and we catch our breath, we wanted to take a moment to highlight some of what we’ve accomplished this year. 2025 Highlights: Subdomain Cloaking: In August 2025,
Introducing NetBeacon MAP: Individual Dashboards Version 2.0.0
The NetBeacon Institute is pleased to announce updated NetBeacon Measurement and Analytics Platform (MAP) Individual Dashboards for registries and registrars. Version 2.0.0 provides more actionable insights within domain abuse, mitigation, and peer groups. The updates make the data more relatable and customizable, allowing users to move beyond simple monthly snapshots to grasp
Criminals are exploiting the UK’s Winter Fuel Payment – this is how global industry collaboration is tackling it
A joint blog: Mayuresh Walke, Nominet, and Rowena Schoo, NetBeacon Institute Nominet sits on the NetBeacon Institute Advisory Council – working together to reduce DNS Abuse globally. The partnership highlights how important it is for trusted organisations to collaborate in keeping the internet safe and secure. We remain dedicated to working together
Bulletin: DNS Abuse Campaign Exploiting “Subdomain Cloaking”
Summary In August 2025, NetBeacon MAP identified 2,227 unique domain names that appear to be part of a coordinated phishing campaign. The registrations are primarily concentrated in two registrar credentials: 90% (1994) in Aceville Pte. Ltd. (IANA ID 3858) and 10% (230) Dominet (HK) Limited (IANA ID 3775). This campaign uses a
Recent spike in malicious phishing concentrated in two registrars
Summary Record Highs in NetBeacon MAP Data In March 2025 we observed two record highs in NetBeacon Measurement and Analytics Platform (MAP) data: the highest number of unique domain names associated with phishing (47,613), and the largest month-on-month increase in unique domain names associated with phishing (63%). See Figure 1: Aggregate Trends
White Paper: Proposal for PDPs on DNS Abuse
The NetBeacon Institute is pleased to publish our White Paper: Proposal for PDPs on DNS Abuse. We created this paper to support and advance ICANN Community discussions on potential policy development related to DNS Abuse. From our unique perspective, we believe there are a number of issues that are constrained enough to
How have the gTLD contractual amendments impacted DNS Abuse?
Overview In this context, DNS Abuse is defined as malware, botnets, phishing, pharming, and spam (when spam serves as a delivery mechanism for the other forms of DNS Abuse). This was a tremendous achievement. ICANN, the participating registries and registrars, and the ICANN community all deserve recognition for this work. These
NetBeacon Reporter introduces new features as it reaches 50,000 DNS Abuse Reports
NetBeacon Reporter introduces new features as it reaches 50,000 DNS Abuse Reports Since launching NetBeacon Reporter in 2022, we’ve engaged with registrars and DNS Abuse reporters to onboard users, increase reports, and collect ideas for improvements. Today we’re pleased to share that we’ve sent over 50,000 reports of DNS Abuse. This achievement
Sign up to receive updates
Stay up-to-date with the Institute and happenings across the industry in an effort to combat DNS Abuse.