As of May 22, 2026 (UTC)
This report ranks domain zones (TLDs) by how often compromised domains appear relative to the total number of active domains in each zone.
We aggregate daily signals from public threat-intelligence sources and match them to NetAPI zone data.
The full list of compromised domains can be downloaded here.
Use it to compare abuse levels across popular TLDs, spot outliers, and prioritize monitoring or policy decisions.
The table below shows the top 100 zones for the selected sort order.
| TLD | Total Domains | Compromised | Abuse Rate |
|---|---|---|---|
| .yt | 1,077 | 274 | 25.441% |
| .vu | 1,835 | 393 | 21.417% |
| .ml | 4,623 | 626 | 13.541% |
| .gq | 1,748 | 222 | 12.700% |
| .ga | 3,921 | 339 | 8.646% |
| .tk | 13,573 | 1,070 | 7.883% |
| .cf | 6,167 | 363 | 5.886% |
| .surf | 21,382 | 859 | 4.017% |
| .ug | 4,505 | 161 | 3.574% |
| .tf | 1,517 | 41 | 2.703% |
| .rest | 177,846 | 4,654 | 2.617% |
| .re | 17,647 | 273 | 1.547% |
| .fr | 2,464,010 | 36,924 | 1.499% |
| .lat | 281,491 | 3,993 | 1.419% |
| .gd | 7,015 | 82 | 1.169% |
| .cfd | 874,345 | 9,147 | 1.046% |
| .pw | 23,099 | 238 | 1.030% |
| .pm | 16,602 | 144 | 0.867% |
| .fyi | 115,301 | 890 | 0.772% |
| .xin | 146,525 | 1,074 | 0.733% |
| .vg | 2,295 | 16 | 0.697% |
| .garden | 101,581 | 698 | 0.687% |
| .io | 1,274,045 | 8,359 | 0.656% |
| .navy | 1,615 | 10 | 0.619% |
| .pics | 139,523 | 831 | 0.596% |
| .cv | 3,113 | 18 | 0.578% |
| .nf | 2,643 | 15 | 0.568% |
| .cc | 501,235 | 2,841 | 0.567% |
| .tr | 214,988 | 1,195 | 0.556% |
| .icu | 873,585 | 4,754 | 0.544% |
| .cyou | 692,402 | 3,766 | 0.544% |
| .courses | 13,642 | 74 | 0.542% |
| .accountant | 1,311 | 7 | 0.534% |
| .sbs | 1,866,511 | 9,665 | 0.518% |
| .app | 1,466,602 | 7,570 | 0.516% |
| .fit | 74,323 | 378 | 0.509% |
| .page | 50,773 | 254 | 0.500% |
| .monster | 65,452 | 324 | 0.495% |
| .digital | 423,291 | 1,991 | 0.470% |
| .click | 1,223,149 | 5,651 | 0.462% |
| .casa | 67,876 | 307 | 0.452% |
| .sh | 18,189 | 82 | 0.451% |
| .cd | 1,742 | 7 | 0.402% |
| .host | 29,188 | 114 | 0.391% |
| .download | 8,277 | 32 | 0.387% |
| .link | 403,643 | 1,534 | 0.380% |
| .help | 237,040 | 881 | 0.372% |
| .mom | 102,535 | 362 | 0.353% |
| .cam | 91,823 | 316 | 0.344% |
| .gy | 4,544 | 14 | 0.308% |
| .tc | 4,881 | 15 | 0.307% |
| .gl | 2,358 | 7 | 0.297% |
| .motorcycles | 44,331 | 129 | 0.291% |
| .id | 278,882 | 784 | 0.281% |
| .guru | 73,242 | 204 | 0.279% |
| .limo | 2,557 | 7 | 0.274% |
| .pro | 1,595,216 | 4,341 | 0.272% |
| .zw | 7,549 | 20 | 0.265% |
| .shop | 4,025,191 | 10,612 | 0.264% |
| .best | 78,565 | 206 | 0.262% |
| .im | 14,210 | 36 | 0.253% |
| .sx | 1,218 | 3 | 0.246% |
| .ht | 2,043 | 5 | 0.245% |
| .ink | 119,067 | 277 | 0.233% |
| .af | 1,740 | 4 | 0.230% |
| .review | 7,407 | 17 | 0.230% |
| .wiki | 89,635 | 203 | 0.226% |
| .buzz | 186,966 | 411 | 0.220% |
| .credit | 7,357 | 16 | 0.217% |
| .et | 1,848 | 4 | 0.216% |
| .club | 531,214 | 1,142 | 0.215% |
| .my | 103,222 | 221 | 0.214% |
| .luxe | 9,851 | 21 | 0.213% |
| .hair | 74,672 | 159 | 0.213% |
| .army | 11,490 | 24 | 0.209% |
| .mg | 2,394 | 5 | 0.209% |
| .eg | 3,959 | 8 | 0.202% |
| .info | 6,540,304 | 12,864 | 0.197% |
| .je | 2,561 | 5 | 0.195% |
| .tz | 8,999 | 17 | 0.189% |
| .bet | 159,068 | 293 | 0.184% |
| .world | 578,494 | 1,063 | 0.184% |
| .yoga | 34,855 | 64 | 0.184% |
| .homes | 140,035 | 256 | 0.183% |
| .pf | 1,107 | 2 | 0.181% |
| .sn | 3,886 | 7 | 0.180% |
| .ci | 4,592 | 8 | 0.174% |
| .ni | 1,154 | 2 | 0.173% |
| .site | 2,783,546 | 4,615 | 0.166% |
| .support | 48,904 | 79 | 0.162% |
| .so | 16,749 | 27 | 0.161% |
| .bi | 1,246 | 2 | 0.161% |
| .dev | 726,841 | 1,146 | 0.158% |
| .bw | 1,926 | 3 | 0.156% |
| .me | 536,362 | 825 | 0.154% |
| .lol | 1,190,423 | 1,817 | 0.153% |
| .net | 14,141,650 | 21,499 | 0.152% |
| .website | 363,848 | 553 | 0.152% |
| .top | 6,622,093 | 9,835 | 0.149% |
| .limited | 8,096 | 12 | 0.148% |
This report is based on NetAPI datasets and daily signals collected from public and private threat-intelligence sources.
A domain may appear in this report if it has been observed in phishing, malware distribution, spam, botnet activity, or other potentially abusive behavior.
The presence of a domain in this report does not necessarily indicate malicious intent by the domain owner, registrar, registry, or hosting provider. Some domains may be compromised without the owner's knowledge.
Abuse rates are calculated by comparing the number of observed compromised domains against the estimated number of active domains within each TLD.
Smaller TLDs with low registration costs or limited moderation policies may show disproportionately high abuse rates compared to large legacy zones.
Statistics are updated daily and may change as new data becomes available.
Server UTC time: 06:35:29pm
Service Status Domain API Reports Terms of Service Privacy Policy Contact Us
English German Русский Español Français Português 中文 (简体)
Made with favorite in Cyprus