TLD Abuse Rate Report

As of July 22, 2026 (UTC)

This report ranks domain zones (TLDs) by how often compromised domains appear relative to the total number of active domains in each zone.
We aggregate daily signals from public threat-intelligence sources and match them to NetAPI zone data.
The full list of compromised domains can be downloaded here.

Use it to compare abuse levels across popular TLDs, spot outliers, and prioritize monitoring or policy decisions.
The table below shows the top 100 zones for the selected sort order.

Domain zones in database

1,390

Live domains (all zones)

361,581,370

Live compromised domains (all zones)

287,465

Average compromised rate (all zones)

0.080%

Compromised Domains / Total Registered Domains × 100%

By Abuse Rate By Zone Popularity

TLD	Total Domains	Compromised	Abuse Rate
.com	191,051,355	82,751	0.043%
.net	14,276,629	6,405	0.045%
.org	13,742,161	3,200	0.023%
.xyz	11,276,040	6,272	0.056%
.de	9,148,351	748	0.008%
.info	6,703,767	7,487	0.112%
.top	6,266,070	9,154	0.146%
.ru	6,137,523	1,124	0.018%
.cn	6,093,236	1,549	0.025%
.online	4,820,202	1,828	0.038%
.shop	4,311,441	14,713	0.341%
.it	3,121,190	236	0.008%
.store	2,962,551	579	0.020%
.eu	2,801,062	1,567	0.056%
.uk	2,756,088	442	0.016%
.site	2,682,229	4,956	0.185%
.fr	2,507,153	39,356	1.570%
.pl	2,361,024	1,433	0.061%
.nl	2,343,965	175	0.007%
.sbs	1,933,555	8,464	0.438%
.vip	1,926,064	1,065	0.055%
.pro	1,688,387	4,625	0.274%
.app	1,680,062	7,241	0.431%
.jp	1,629,102	91	0.006%
.se	1,362,451	62	0.005%
.click	1,335,058	6,311	0.473%
.io	1,332,545	9,505	0.713%
.lol	1,306,119	1,894	0.145%
.bond	1,305,903	669	0.051%
.biz	1,274,421	434	0.034%
.ch	1,160,606	111	0.010%
.br	1,133,204	605	0.053%
.ca	1,073,352	201	0.019%
.cz	1,033,796	50	0.005%
.au	1,028,760	150	0.015%
.icu	997,771	2,482	0.249%
.cfd	979,667	6,892	0.704%
.es	978,377	132	0.013%
.live	931,497	4,195	0.450%
.in	830,018	362	0.044%
.co	817,776	590	0.072%
.xn--p1ai	805,571	37	0.005%
.dk	792,240	32	0.004%
.dev	781,344	1,360	0.174%
.cyou	778,135	6,843	0.879%
.asia	756,056	93	0.012%
.be	717,162	71	0.010%
.space	700,394	397	0.057%
.tech	676,808	168	0.025%
.cloud	673,997	203	0.030%
.at	648,731	166	0.026%
.fun	637,277	173	0.027%
.life	618,973	450	0.073%
.world	595,138	285	0.048%
.me	551,926	489	0.089%
.club	551,257	1,181	0.214%
.cc	544,664	3,180	0.584%
.hu	506,081	245	0.048%
.blog	504,265	83	0.016%
.digital	501,163	2,150	0.429%
.fi	498,791	11	0.002%
.today	489,802	136	0.028%
.mobi	432,115	15	0.003%
.link	412,288	343	0.083%
.art	399,323	39	0.010%
.us	386,249	725	0.188%
.ro	377,278	144	0.038%
.autos	352,074	357	0.101%
.kr	345,969	78	0.023%
.website	343,063	458	0.134%
.work	339,679	319	0.094%
.no	323,647	20	0.006%
.lat	307,674	4,060	1.320%
.gr	307,033	56	0.018%
.za	295,982	193	0.065%
.sk	294,231	39	0.013%
.ir	291,980	148	0.051%
.id	285,848	971	0.340%
.vn	282,266	103	0.036%
.cl	281,828	107	0.038%
.ua	276,983	99	0.036%
.one	268,077	289	0.108%
.skin	266,946	278	0.104%
.help	263,458	919	0.349%
.mx	250,147	121	0.048%
.pt	246,304	87	0.035%
.nz	232,750	38	0.016%
.edu	229,952	8	0.003%
.buzz	224,663	174	0.077%
.studio	221,581	9	0.004%
.tr	219,501	94	0.043%
.ai	213,277	146	0.068%
.ar	212,427	87	0.041%
.tw	201,035	21	0.010%
.bet	194,303	614	0.316%
.garden	193,585	722	0.373%
.nu	188,415	13	0.007%
.beer	174,063	90	0.052%
.agency	163,795	14	0.009%
.homes	158,545	80	0.050%

Methodology & Disclaimer

This report is based on NetAPI datasets and daily signals collected from public and private threat-intelligence sources.

A domain may appear in this report if it has been observed in phishing, malware distribution, spam, botnet activity, or other potentially abusive behavior.

The presence of a domain in this report does not necessarily indicate malicious intent by the domain owner, registrar, registry, or hosting provider. Some domains may be compromised without the owner's knowledge.

Abuse rates are calculated by comparing the number of observed compromised domains against the estimated number of active domains within each TLD.

Smaller TLDs with low registration costs or limited moderation policies may show disproportionately high abuse rates compared to large legacy zones.

Statistics are updated daily and may change as new data becomes available.