From .com to .beauty: The evolving threat landscape of unwanted email
Mar 26, 2024João Tomé

Summary
This post analyzes the prevalence of spam and malicious emails associated with various Top-Level Domains (TLDs) throughout 2023. It reveals that recently introduced generic TLDs (gTLDs), particularly those related to the beauty industry, have a high percentage of unwanted emails. The analysis also highlights that while .com accounts for the largest volume of spam and malicious emails, newer gTLDs are emerging as significant sources of these threats. The post details trends in TLD usage for malicious purposes, including changes observed in the latter half of 2023, and provides a list of the top 50 spam and malicious TLDs. This data is now integrated into Cloudflare Radar's email security insights.
More from the DNS Infrastructure & Naming Conventions trail
- The keys to the Internet change on October 11, 2026. Are you ready?
- 1.1.1.1 now supports post-quantum DNSSEC, all 2,420 bytes of it
- How we saved 100 terabytes of memory by optimizing 1.1.1.1’s DNS cache
- BGP ORIGIN attribute manipulation and its impact on the Internet
- Cloudflare Internal DNS is now generally available