Malware Activity in Top-level Domains (TLDs)
July 1 - September 30, 2021

We analyzed the domains reported as serving up malware to see how they were distributed across the top-level domains. For our analysis, we extract the Top-level Domain (e.g., com, xyz, uk) from the hostnames we found in malware reports.

For the period, we identified 78 TLDs with a minimum of 30,000 domains and 25 malware domains

27 TLDs had more than 100 domain names reported for serving up malware

8 TLDs had more than 500 domain names reported for serving up malware

3 TLDs had more than 1000 domain names reported for serving up malware

In the table below, we present the twenty TLDs that had the highest number of domains reported as serving up malware.