This annual report consolidates DNS threat intelligence collected throughout 2025, providing a year-over-year analysis of global DNS-based attack trends. It highlights sustained growth in phishing, malware, and new domain abuse, driven by automated threat tooling and phishing-as-a-service platforms. The report examines changes in attacker infrastructure, including shifting top-level domains, increased domain churn, and faster campaign lifecycles. It also analyzes organizational blocking behaviors, showing how companies prioritize categories like advertising, trackers, and social platforms to reduce risk and bandwidth consumption. The report positions DNS-layer security as a critical control for detecting early-stage threats, improving visibility across hybrid environments, and adapting def

Join for free to read