Domain Activity Reports

Global Domain Activity Report: Q1 2026

Posted on May 5, 2026

Global domain activity continues to evolve at scale, with shifting registration patterns and persistent malicious use shaping the landscape.

Global Domain Activity Report: Q1 2026 focused on registrant behaviors connected to 26.5M+ NRDs, 6.7M+ of which may have been registered with malicious intent. The analysis further included 2.7B+ and 5.0B+ MX and NS domains, respectively, along with 3.3M+ confirmed malicious domains.

Our research team leveraged WhoisXML API’s extensive domain, DNS, and threat intelligence to uncover:

The top NRD TLDs, zooming in on the top gTLDs and ccTLDs as well
The most popular NRD registrars
The top TLDs of the NRDs likely registered with malicious intent
The top MX and NS domains
The top TLDs of the confirmed malicious domains

Download Global Domain Activity Report: Q1 2026 now.

Read other reports

Try our WhoisXML API for free

Get Started

Have questions?

We are here to listen. For a quick response, please select your request type. By submitting a request, you agree to our Terms of Service and Privacy Policy.

Related posts

Try our WhoisXML API for free

Have questions?