As cited
Copy frozen at (site build).
threat intel
Risky Bulletin: A tenth of all new domains last year were malicious
A new Interisle report found that approximately 10 percent of all domains registered in 2025 were later added to cybersecurity blocklists for malicious activity, totaling roughly 8.5 million domains out of 85 million created. Researchers estimate the actual number of malicious domains could be double, around 16.8 million, as newly registered domains may not be detected and blocklisted until they are actively deployed in operations.
Why it matters: Security teams must assume a significantly higher volume of malicious infrastructure is being registered and deployed than currently visible in blocklists, requiring more aggressive domain reputation monitoring and threat intelligence integration into defensive systems.
- Source published
- First seen by Cybersecurity Tracker