Malware Activity in Top-level Domains (TLDs)
April 1,2023 - June 30,2023

We analyzed the domains reported as serving up malware to see how they were distributed across the top-level domains. For our analysis, we extract the Top-level Domain (e.g., com, xyz, uk) from the hostnames we found in malware reports.

In the table below, we present the twenty TLDs that had the highest number of domains reported as serving up malware. A complete list of TLDs where malware was reported for the quarter can be downloaded in CSV format from the Records page.

Ranking of TLDs by Malware Domains (April to June 2023)

TLDs with a minimum of 30,000 domains and 25 malware domains

Rank TLD Total Malware Domains ▼
1 com 18,009
2 net 1,278
3 br 1,257
4 org 1,050
5 ru 928
6 in 540
7 it 447
8 info 434
9 cn 380
10 pl 348
11 mx 321
12 id 287
13 uk 284
14 fr 271
15 de 271
16 ng 263
17 shop 249
18 rest 247
19 cloud 246
20 xyz 224

Quarterly Update:
Key Statistics
Quarterly Update:
Top Level Domains
Quarterly Update:
Registrars
Quarterly Update:
Hosting Networks
Quarter over Quarter:
Top Level Domains