Malware Activity in Top-level Domains (TLDs)
October 1,2022 - December 31,2022

We analyzed the domains reported as serving up malware to see how they were distributed across the top-level domains. For our analysis, we extract the Top-level Domain (e.g., com, xyz, uk) from the hostnames we found in malware reports.

In the table below, we present the twenty TLDs that had the highest number of domains reported as serving up malware. A complete list of TLDs where malware was reported for the quarter can be downloaded in CSV format from the Records page.

Ranking of TLDs by Malware Domains (October to December 2022)

TLDs with a minimum of 30,000 domains and 25 malware domains

Rank TLD Total Malware Domains ▼
1 com 27,018
2 net 2,121
3 br 2,092
4 in 1,887
5 org 1,736
6 ru 1,339
7 xyz 629
8 id 533
9 ir 499
10 uk 452
11 au 436
12 co 429
13 ng 422
14 mx 419
15 pk 403
16 it 395
17 pl 382
18 cl 374
19 vn 336
20 de 330

Quarterly Update:
Key Statistics		 Quarterly Update:
Top Level Domains		 Quarterly Update:
Registrars		 Quarterly Update:
Hosting Networks
Quarter over Quarter:
Top Level Domains