cyber.hendryadrian.com
Security Report · circleid.com

WhoisXML API Reports Q2 2026 Domain and DNS Trends

· Original article ↗

Summary

WhoisXML API analyzed Q2 2026 domain activity, reporting 30 million+ new registrations, 7.6 million+ likely malicious registrations, and increased concentration among leading MX and NS providers.

Key points

  • WhoisXML API analyzed 30 million+ newly registered domains (NRDs) from April 1 to June 30, 2026; volume rose 13.1% from Q1.
  • The report assessed 3.2 million+ confirmed malicious domains using threat intelligence data feeds.
  • The analysis identified 7.6 million+ NRDs as likely registered with malicious intent, including 4.5 million+ among NRDs using the top five TLDs.
  • The top five MX domains served 1.4 billion+ site owners, up 6.8% from Q1; the top five NS domains served 1.5 billion+, up 18.8%.
  • Confirmed malicious domains using the top five TLDs fell 2.3%, from 2.08 million+ in Q1 to 2.03 million+ in Q2.
  • The report highlights growing concentration in MX and NS providers as a dependency for email and DNS infrastructure.

Article Details

Publisher
WhoisXML API
Report Period
Q2 2026 (2026-04-01 to 2026-06-30)
Scope
Global newly registered domain and DNS activity, including domains assessed as likely registered with malicious intent and confirmed malicious domains.
Sample Size
30.0+ million newly registered domains; 2.8+ billion MX domains and 4.7+ billion NS domains; 3.2+ million confirmed malicious domains.
Key Statistics
  • 30.0+ million newly registered domains were recorded in Q2 2026, up 13.1% from 26.5+ million in Q1 2026.
  • 7.6+ million Q2 2026 newly registered domains were assessed as likely registered with malicious intent.
  • The report analyzed 3.2+ million confirmed malicious domains; confirmed malicious domains using the top 5 TLDs decreased 2.3%, from 2.08+ million in Q1 to 2.03+ million in Q2 2026.
  • Site-owner counts for the top 5 MX domains rose 6.8%, from 1.3+ billion in Q1 to 1.4+ billion in Q2 2026; counts for the top 5 NS domains rose 18.8%, from 1.2+ billion to 1.5+ billion.

MITRE ATT&CK

T1583.001 · DomainsThe report says 7.6+ million newly registered domains were likely registered with malicious intent and analyzes malicious-domain registration trends.

Vendors

WhoisXML APIWhoisXML API analyzed 30.0+ million newly registered domains (NRDs) from 1 April to 30 June 2026.

Products

DNS Database Download[Dataset/Feed ] Domain and threat intelligence sources used in the report – Newly Registered Domains (NRDs) Data Feed, DNS Database Download, Threat Intelligence Data FeedsNewly Registered Domains (NRDs) Data Feed[Dataset/Feed ] Domain and threat intelligence sources used in the report – Newly Registered Domains (NRDs) Data Feed, DNS Database Download, Threat Intelligence Data FeedsThreat Intelligence Data Feeds[Dataset/Feed ] Domain and threat intelligence sources used in the report – Newly Registered Domains (NRDs) Data Feed, DNS Database Download, Threat Intelligence Data Feeds

Related Articles