Malware Activity in Top-level Domains (TLDs)
October 1 - December 31, 2021

We analyzed the domains reported as serving up malware to see how they were distributed across the top-level domains. For our analysis, we extract the Top-level Domain (e.g., com, xyz, uk) from the hostnames we found in malware reports.

For the period, we identified 78 TLDs with a minimum of 30,000 domains and 25 malware domains

44 TLDs had more than 100 domain names reported for serving up malware

9 TLDs had more than 500 domain names reported for serving up malware

5 TLDs had more than 1000 domain names reported for serving up malware

In the table below, we present the twenty TLDs that had the highest number of domains reported as serving up malware.

Ranking of TLDs by Malware Domains
(October to December 2021)

TLDs with a minimum of 30,000 domains and 25 malware domains

Rank TLD Total Malware Domains ▼
1 com 17,408
2 xyz 1,955
3 net 1,405
4 ru 1,238
5 org 1,187
6 br 949
7 in 782
8 cn 595
9 pl 546
10 top 473
11 it 450
12 de 447
13 hu 354
14 eu 328
15 cz 327
16 vn 325
17 info 319
18 nl 317
19 id 317
20 fr 274