This quarterly threat intelligence report analyzes DNS traffic observed on the DNSFilter network during Q1 2025. It examines overall query growth, blocked traffic percentages, and evolving threat trends across malware, phishing, botnets, cryptomining, and newly registered domains. The report highlights continued growth in phishing and malware activity, with new domains remaining a significant early indicator of emerging threats. Data visualizations show changes in blocked traffic rates, category distribution, and the most frequently targeted threat types. The report emphasizes the importance of blocking new domains as a proactive defense against zero-day attacks and outlines how DNS-layer protection provides early visibility into attack campaigns before they reach endpoints or networks.

Join for free to read