Malware Activity in Top-level Domains (TLDs)
April 1, 2022 – June 30, 2022

We analyzed the domains reported as serving up malware to see how they were distributed across the top-level domains. For our analysis, we extract the Top-level Domain (e.g., com, xyz, uk) from the hostnames we found in malware reports.

In the table below, we present the twenty TLDs that had the highest number of domains reported as serving up malware. A complete list of TLDs where malware was reported for the quarter can be downloaded in CSV format from the Records page.

Ranking of TLDs by Malware Domains (April to June 2022)

TLDs with a minimum of 30,000 domains and 25 malware domains

Rank TLD Total Malware Domains ▼
1 com 14,451
2 net 1,122
3 org 1,016
4 ru 829
5 in 684
6 br 657
7 pl 457
8 it 421
9 de 378
10 cloud 332
11 eu 292
12 nl 290
13 xyz 289
14 top 280
15 vn 279
16 fr 270
17 hu 269
18 cz 269
19 id 257
20 uk 228

Quarterly Update:
Key Statistics
Quarterly Update:
Top Level Domains
Quarterly Update:
Registrars
Quarterly Update:
Hosting Networks
Quarter over Quarter:
Top Level Domains