Find insight from Spamhaus Project researchers into domain abuse and trends with newly observed domains.
OCT 2025 - MARCH 2026
This reporting period saw 46.9 million new domains, with .bond (and many more TLDs!) experiencing significant domain churn. Meanwhile, 2.15 million malicious domains were detected, with domains associated with botnet C&C’s and malware increasing by (+289%) and +206% respectively. But, which TLD had a massive 17.5% of its zone file listed?
Published 15 Apr 2026
This reporting period saw 46.9 million new domains, with .bond (and many more TLDs!) experiencing significant domain churn. Meanwhile, 2.15 million malicious domains were detected, with domains associated with botnet C&C’s and malware increasing by (+289%) and +206% respectively.But, which TLD had a massive 17.5% of its zone file listed?
Published 21 October 2025
Over the last 6 months a total of 43.5 million new domains were registered — 75% of them gTLDs — with .top (+94%) and .xyz (+103%) among the top three. Domain listings surged by 48.3%, and one registry saw particularly huge increases (can you guess which one?). Read the latest report here.
Published 10 April 2025
Over the last six month new domains increased by 7.39%, with 2.9 million malicious domains detected. Chinese gambling sites dominate the Top 20 TLDs, while .top remains a hotspot for abuse - this time with a spike in toll road scams. Read the full report here.
Published 10 Oct 2024
This reporting period our domain experts observed 36 million new domains and listed 1.8 million domains. In a surprising turn of events, “apple” dropped out of the Top 20 phishing terms! Meanwhile, TLD .top’s (#2) poor abuse handling performance prompts a letter from ICANN.
Published 11 Apr 2024
New domains remain unchanged (27%), even as ShortDot registered gTLDs .sbs and .bond continue to increase 172% and 148%, respectively. During this reporting period, 1 million domains were listed - which TLDs and registries are under the spotlight? Read the full report here.
Published 16 October 2023
Despite +178% growth in gTLD .bond, number of new domain registrations remained unchanged. In Q3, there were 554,582 detections (-23%) and compromised malware dropped from 11,003 in Q2, to 1,220 in Q3. Could this be the result of the Qakbot takedown?
Published 18 July 2023
This quarter our domain experts observed 17 million new domains and as expected, Freenom's final departure. With this, new TLDs and registries are now front and centre, with cheap gTLDs the latest victim. Find out more in this Q2 report.
Published 14 April 2023
Researchers observed unprecedented change, with a decrease in registration and abuse number for all five Freenom ccTLDs, including a steep decline for .ml (-74%). Yet with this, significant increases for gTLDs .store and .fun. Is this the Freenom effect?
Published 19 Jan 2023
Our domain experts have created a high-level analysis of the domain ecosphere they observed in 2022 - from top listed TLDs, to top phishing terms, counts of malicious vs. compromised domains, and some valuable recommendations.
Published 17 Jan 2023
As anticipated, the number of newly observed and listed domains increased in Q4 2022. And with that, there was a steep increase in both compromise malware (+616%) and botnet C&C (+828%) listings. Find the detail and insight in this Q4 report.
Published 20 Oct 2022
We bear good news regarding domain name abuse: almost all numbers are down compared to last quarter! See the Q3 trends and find the insight into some of the tactics used by bad actors and advice to circumvent falling victim.
Published 19 July 2022
From the number of newly registered domains, to the domain abuse our researchers are observing, this update highlights trends, provides insights into the poor reputation of domains, and champions providers where positive improvements are seen.
