Anti-Abuse Quarterly Report
Q2 2026
The XYZ Anti-Abuse Quarterly report highlights just some of the actions that the XYZ Anti-Abuse Team has taken in the quarter to proactively address abuse. Visit xyz.xyz/anti-abuse to see report archives and read more about how XYZ Registry goes above and beyond to protect the Internet.
How our IWF membership disrupts CSAM
XYZ Registry remains committed to combating DNS abuse and supporting efforts to promote a safer internet. The vast majority of domains across .xyz and our other domain extensions support legitimate businesses, communities, and ideas. We work with industry partners to address the relatively small number used for illegal and otherwise abusive activity.
Combating online child sexual abuse material (CSAM) requires collaboration across the internet community. Organizations that identify and assess CSAM play an important role in sharing actionable intelligence and enabling internet stakeholders to respond effectively.
This quarter, we are highlighting the impact of our partnership with the Internet Watch Foundation (IWF), an organization that works to eliminate child sexual abuse material online. The IWF identifies and assesses CSAM, and as a member, XYZ Registry helps fund that work and acts on the reports the IWF sends us.
XYZ Registry has been a member of the IWF since 2021. The IWF reports abuse at the URL level, so a single domain hosting child sexual abuse material can generate thousands of separate reports. In one recent case, approximately 8,000 URLs traced back to one domain. XYZ Registry suspended that domain and cut off access to all URLs in a single enforcement action. A small number of domains can account for a large volume of reported abuse, and suspending the domain resolves every URL beneath it at once.
This kind of protection is becoming more widely available. In 2024, Public Interest Registry, the nonprofit operator of .org, began sponsoring free access to key IWF services for other registries, and that access has since expanded to registrars. The services include real-time alerts that flag abuse so operators can act quickly. XYZ Registry funds its own IWF membership. We encourage other registries, registrars, and hosting providers to take advantage of programs like this one. The more operators acting on these reports, the harder it becomes for abuse to move from one domain to the next. https://www.iwf.org.uk/membership/iwf-domain-services/
Complaints resolved
The XYZ Anti-Abuse Team promptly addresses complaints from individuals via email and by ticket at gen.xyz/abuse.
Q2 2026
| DNS Abuse Type | # Tickets |
|---|---|
| Spam | 6 |
| Phishing | 1,936 |
| Malware | 80 |
| DDOS/Botnets | 5 |
| Other | 532 |
New Anti-Abuse Partnerships
The XYZ Anti-Abuse Team has developed strong partnerships with many of the industry’s leading cybersecurity data providers to help identify and eliminate bad actors.
Q2 2026
| DNS Abuse Type | # New Contributors |
|---|---|
| Phishing | 1 |
| All/Other | 2 |
Collaborations with registrar partners
XYZ delivers comprehensive daily domain suspension reports to our registrar partners.
| Time Period | # Notices | Avg Per Day |
|---|---|---|
| Q2 2026 | 2,238 | 24.9 |
| April 2026 | 722 | 24.1 |
| May 2026 | 796 | 25.7 |
| June 2026 | 720 | 24.0 |
DGA Threat Investigations
The Anti-Abuse Team additionally flags suspicious registrations for review, such as a large number of new domains created in a short period of time. XYZ’s enhanced initiatives target abuse at its source by addressing the actions of bad actors or registrants.
Q2 2026
| Time Period | # Investigations |
|---|---|
| Q2 2026 | 13 |
Domains investigated by XYZ’s Anti-Abuse Team
XYZ monitors abuse through our proprietary in-house system. The Anti-Abuse Team suspends domains that are engaging in any activities in violation of the XYZ Acceptable Use & Anti-Abuse policies.
Q2 2026
| TLD | # Domains Investigated |
|---|---|
| .autos | 22,911 |
| .baby | 622 |
| .beauty | 375 |
| .boats | 1,971 |
| .ceo | 280 |
| .christmas | 751 |
| .college | 25 |
| .game | 6 |
| .hair | 786 |
| .homes | 2,619 |
| .lat | 11,284 |
| .lol | 9,149 |
| .makeup | 267 |
| .mom | 4,026 |
| .monster | 519 |
| .motorcycles | 2,568 |
| .pics | 2,077 |
| .protection | 1 |
| .quest | 916 |
| .rent | 36 |
| .security | 3 |
| .skin | 997 |
| .xyz | 57,606 |
| .yachts | 612 |
Law enforcement & court orders
Collaboration with legal entities is a crucial aspect of XYZ’s Anti-Abuse operations. This section outlines requests by various law enforcement agencies like the IRS, FBI, and the police. Additionally, it includes WHOIS requests and court orders.
Q2 2026
| Law Enforcement/Court Orders | |
|---|---|
| IRS | 5 |
| Police | 1 |
| FBI | 1 |
| Domain Transfer Orders | 3 |
| WHOIS requests | 0 |
| DHS | 0 |
Unsuspension requests
When websites have been compromised, the XYZ Anti-Abuse Team promptly responds by suspending the affected domains to mitigate any potential risks. This immediate action is not only crucial for security but has also earned appreciation from users, as it directly aids in safeguarding their customers from being infected by their hacked website. While XYZ acts decisively against potential abuses, the Anti-Abuse Team also recognizes the importance of rectifications. This data presents the total number of unsuspension requests this quarter.
Q2 2026
| Unsuspension Requests | |
|---|---|
| Total # of requests | 1,030 |
IWF data
IWF (Internet Watch Foundation) is an organization that combats online child sexual exploitation content and other malicious web activities.
In our mission to make the internet safer, XYZ is a member of the IWF. Together, we’re actively identifying and addressing URLs and domains that may host harmful content.
Q2 2026
| IWF | |
|---|---|
| Domains | 19 |
| URLs | 44 |
The importance of anti-abuse
The XYZ Registry’s commitment to combating DNS abuse remains unwavering, and we advocate for a proactive approach to address online threats. Visit xyz.xyz/anti-abuse to see report archives and read more about how XYZ goes above and beyond to protect the Internet.