Product Blog

WhoisXML API analyzed 14.0M+ domains registered between 1 and 31 October 2026 that appeared in Newly Registered Domains to identify the most popular registrars, TLD extensions, and other global domain registration trends. This number rose by 13.7% from 12.3M+ NRDs last month.

WhoisXML API analyzed 12.3+ million domains registered between 1 and 30 September 2026 that appeared in Newly Registered Domains to identify the most popular registrars, TLD extensions, and other global domain registration trends. This number rose by 5.9% from 11.6+ million NRDs last month.

We also determined the top TLD extensions used by 3.2+ million domains likely registered with malicious intent from the First Watch Malicious Domains Data Feed in September 2026. This number increased by 8.3% from the previous month.

Next, we studied the top TLD extensions of 1.07+ million confirmed malicious domains from the Threat Intelligence Data Feeds this month, which declined by 2.1% from 1.09+ million in August.

Finally, we summed up our findings and provided links to the threat reports produced using DNS and domain intelligence sources during the period.

WhoisXML API analyzed 11.6+ million domains registered between 1 and 31 August 2026 that appeared in Newly Registered Domains to identify the most popular registrars, TLD extensions, and other global domain registration trends. This number rose by 4.4% from 11.1+ million NRDs last month.

We also determined the top TLD extensions used by 3.0+ million domains likely registered with malicious intent from the First Watch Malicious Domains Data Feed in August 2026. This number increased by 51.7% from the previous month.

WhoisXML API analyzed 11.1+ million domains registered between 1 and 31 July 2026 that appeared in Newly Registered Domains to identify the most popular registrars, TLD extensions, and other global domain registration trends. This number rose by 20.1% from 9.2+ million NRDs last month.

We also determined the top TLD extensions used by 1.9+ million domains likely registered with malicious intent from the First Watch Malicious Domains Data Feed in July 2026. This number decreased by 1.1% from the previous month.

WhoisXML API analyzed 9.2+ million domains registered between 1 and 30 June 2026 that appeared in Newly Registered Domains to identify the most popular registrars, TLD extensions, and other global domain registration trends. This number declined by 12.2% from 10.5+ million NRDs last month.

We also determined the top TLD extensions used by 2.0+ million domains likely registered with malicious intent from the First Watch Malicious Domains Data Feed in June 2026. This number decreased by 31.2% from the previous month.

Next, we studied the top TLD extensions of 1.07+ million confirmed malicious domains from the Threat Intelligence Data Feeds this month, which dropped by 1.1% from 1.08+ million in May.

Finally, we summed up our findings and provided links to the threat reports produced using DNS and domain intelligence sources during the period.

TL;DR

• The feed now captures up to 2x more newly added, updated, dropped, and discovered domains each day.
• Every domain comes with a more complete registration record, because the feed compares its RDAP and WHOIS data and keeps the fullest version.
• No actions needed on your side: the files and the way you integrate them stay the same.

WhoisXML API analyzed 10.5+ million domains registered between 1 and 31 May 2026 that appeared in Newly Registered Domains to identify the most popular registrars, TLD extensions, and other global domain registration trends. This number rose by 3.6% from 10.2+ million NRDs last month.

We also determined the top TLD extensions used by 2.9+ million domains likely registered with malicious intent from the First Watch Malicious Domains Data Feed in May 2026. This number rose by 6.4% from the previous month.

Next, we studied the top TLD extensions of 1.0+ million confirmed malicious domains from the Threat Intelligence Data Feeds this month, which decreased by 2.4% from 1.1+ million in April.

Finally, we summed up our findings and provided links to the threat reports produced using DNS and domain intelligence sources during the period.

WhoisXML API analyzed 10.2+ million domains registered between 1 and 30 April 2026 that appeared in Newly Registered Domains to identify the most popular registrars, TLD extensions, and other global domain registration trends. This number rose by 14.1% from 8.9+ million NRDs last month.

We also determined the top TLD extensions used by 2.7+ million domains likely registered with malicious intent from the First Watch Malicious Domains Data Feed in April 2026. This number rose by 30.8% from the previous month.

Next, we studied the top TLD extensions of 1.11+ million confirmed malicious domains from the Threat Intelligence Data Feeds this month, which decreased by 2.0% from 1.13+ million in March.

Finally, we summed up our findings and provided links to the threat reports produced using DNS and domain intelligence sources during the period.