Malware Activity in Top-level Domains (TLDs)
January 1 - March 31, 2021

We analyzed the domains reported as serving up malware to see how they were distributed across the top-level domains. For our analysis, we extract the Top-level Domain (e.g., com, xyz, uk) from the hostnames we found in malware reports.

For the period, we identified 63 TLDs with a minimum of 30,000 domains and 25 malware domains

21 TLDs had more than 100 domain names reported for serving up malware

3 TLDs had more than 1000 domain names reported for serving up malware

In the table below, we present the twenty TLDs that had the highest number of domains reported as serving up malware.

Ranking of TLDs by Malware Domains (January to March 2021)

TLDs with a minimum of 30,000 domains and 25 malware domains

Rank TLD Total Malware Domains ▼
1 com 9,746
2 net 1,789
3 ru 1,088
4 xyz 455
5 org 423
6 br 385
7 top 335
8 cn 322
9 in 299
10 info 245
11 us 170
12 uk 166
13 de 151
14 xn--p1ai 129
15 co 124
16 pl 123
17 biz 114
18 za 112
19 ir 104
20 online 103