Spam Activity: Key Statistics Quarter over Quarter comparison: December 1,2025 - February 28,2026

Each reporting period, we analyze domain names reported for spam. We collect spam reports from three reputation blocklists (Spamhaus, SURBL, Invaluement). We eliminate duplicates and enhance these reports with other metadata — domain and IP address registration data, ICANN registry and registrar monthly reports, routing data, attack type, and other indicators — to create spam records. We use the spam records to measure and report key statistics for each reporting period.

A comparison of key statistics for the periods September 1, 2025 - November 30, 2025 and December 1,2025 - February 28,2026 appears in the table below.

Measurement September to November 2025 December to February 2026 Change
in
Measurement
Total number of spam reports collected from feeds (per quarter) 6,272,031 4,260,387 -2,011,644
Total number of spam records produced from spam reports 5,525,719 3,558,735 -1,966,984
Unique domain names reported for hosting spammed content or spambots 5,306,334 3,322,601 -1,983,733
Top-level Domains (TLDs) with domain names reported for hosting spammed content or spambots 774 775 1
Registrars (by distinct IANA ID) that had gTLD domains under management reported for hosting spammed content or spambots 2,717 2,703 -14
Registrars (by distinct name) that had domains under management reported for hosting spammed content or spambots 3,665 3,711 46
Hosting Networks (ASNs) where we observed hosted spammed content or spambots 3,702 4,025 323
Number of subdomain reseller accounts reported for hosting spammed content 173,826 121,138 -52,688