ICANN terminates two registrars over DNS abuse failures

ICANN has terminated the accreditation of two domain registrars in quick succession, citing unresolved compliance failures and escalating DNS abuse concerns. The decisions reflect heightened scrutiny of registrar obligations under the Registrar Accreditation Agreement (RAA), particularly in handling abuse reports and maintaining operational standards.

What happened

Trustname.com, operated by Estonia-based Fewmoretaps OU, will lose its ICANN accreditation effective 11 September. The termination follows four formal breach notices issued within a 78-day period, the most recent on 26 August. ICANN determined that Trustname failed to act promptly on phishing and other DNS abuse reports, violating RAA Sections 3.18.1 and 3.18.2. While the registrar acknowledged shortcomings and introduced remediation measures beginning in February, ICANN concluded these efforts were insufficient. Data from ICANN’s Domain Metrica showed the median percentage of Trustname-sponsored domains reported for phishing rising from approximately 0.7% in January to 10% in August, despite ongoing remediation attempts.

Separately, IPIP Inc. will lose its accreditation on 13 September after failing to cure an 5 August breach notice. The violations included non-compliance with Registration Data Access Protocol (RDAP) requirements, missed registration-data escrow deposits, unpaid accreditation fees, and the absence of a mechanism for disclosing non-public registration data. ICANN’s records indicate repeated unsuccessful attempts to contact IPIP, including unanswered emails and unreachable telephone contacts.

For both registrars, ICANN will use its De-Accredited Registrar Transition Procedure to transfer managed domains to qualified accredited registrars. The total number of domains affected was not disclosed in the termination notices.

A third registrar, Beijing Zihai Technology Co., Ltd., received a breach notice on 26 August but remains accredited pending further review.

Why it matters

The terminations signal ICANN’s willingness to enforce contractual obligations more aggressively, particularly in areas directly impacting end-user security. DNS abuse has become a focal point for regulators and industry groups, with phishing and malware domains increasingly tied to financial fraud and identity theft. Registrars that fail to mitigate such abuse risk not only reputational damage but also operational disruptions for their customers, who may face sudden domain transfers or service interruptions.

The cases also highlight the challenges of cross-border compliance. Trustname.com, based in Estonia, and IPIP Inc., whose jurisdiction was not specified in the termination notices, both faced difficulties meeting ICANN’s requirements despite multiple opportunities to remedy violations. The lack of consistent enforcement mechanisms across jurisdictions has long been a point of contention in the domain industry, and these terminations may prompt calls for clearer global standards.

What to watch

Registrars and resellers should review their abuse-handling procedures and RDAP compliance to avoid similar enforcement actions. ICANN’s Domain Metrica data, which tracks abuse trends, may see increased adoption as a benchmarking tool. Meanwhile, the transition of domains from de-accredited registrars could test ICANN’s transfer protocols, particularly if the volume of affected domains is substantial. Beijing Zihai Technology’s ongoing breach proceeding may also provide further insight into ICANN’s enforcement thresholds.