Why do phishers tend to use new domains?

Brian Krebs, an internet security expert, analyzed that the reason scammers like new TLDs is because registrars for new TLDs tend to offer domains at low cost without verifying the person or organization registering them. In fact, of the TLDs that are most frequently used for cybercrime, nine have registration fees of less than $1, and about 20 have fees of less than $2.

John Levine, president of the Coalition to Combat Spam (CAUCE), criticized ICANN for introducing TLDs one after another, saying, 'We need to significantly tighten our registration policies.' He also said of registrars who operate new TLDs, 'They tend to offer domains at low prices to cover the initial costs of operating a TLD, which can be up to $300,000 (approximately 45 million yen), but they cannot make a profit in business unless they can be renewed at full price from the second year onwards. Scammers and spammers use disposable domains and do not renew them, so selling domains to them in the hope that they will buy a large number of domains at once tends to be a losing strategy.'

According to Interisle's research, the number of phishing sites using subdomain providers is also on the rise. 'Since scammers often create a large number of accounts at once, subdomain providers should limit the number of accounts and prevent automatic registration by bots,' said Levine.