This report presents DNS-based threat insights from Q2 2025 activity across the DNSFilter network. It shows that 3.86% of total DNS traffic was blocked, the highest percentage recorded to date, reflecting both increased threat activity and stronger security controls. New domains remained the top threat category by volume, while phishing and malware traffic grew significantly quarter over quarter. The report analyzes blocked and allowed traffic categories, revealing how organizations balance productivity and security. Additional sections examine the most blocked top-level domains, malicious ccTLDs, and the growing role of phishing-as-a-service techniques such as MFA bypass attacks. The report concludes that DNS-based threats are becoming more dynamic and reinforces the need for early, adapt

Join for free to read