WhoisXML API analyzed 12.3+ million domains registered between 1 and 30 September 2026 that appeared in Newly Registered Domains to identify the most popular registrars, TLD extensions, and other global domain registration trends. This number rose by 5.9% from 11.6+ million NRDs last month.
We also determined the top TLD extensions used by 3.2+ million domains likely registered with malicious intent from the First Watch Malicious Domains Data Feed in September 2026. This number increased by 8.3% from the previous month.
Next, we studied the top TLD extensions of 1.07+ million confirmed malicious domains from the Threat Intelligence Data Feeds this month, which declined by 2.1% from 1.09+ million in August.
Finally, we summed up our findings and provided links to the threat reports produced using DNS and domain intelligence sources during the period.
WhoisXML API researchers have reviewed 30,001 hostnames containing the word Ledger and 23,495 saved screenshots. Of the 1,207 pages that visibly presented Ledger, 1,140 involved at least one familiar customer activity: downloading software, setting up a device, accessing an account, recovering a wallet, making a purchase, or contacting support.
WhoisXML API, a leading provider of domain, DNS, IP, and WHOIS data, today announced that it has signed a basic agreement (MOU) with G-Search, a Fujitsu Group company providing data services and digital solutions in Japan, to explore a strategic collaboration.
WhoisXML API serves more than 52,000 customers worldwide, including Fortune 1000 companies, with more than 60% of IT-Harvest’s Cyber 150 companies in key categories relying on its data. The company provides domain, DNS, IP, and WHOIS intelligence used across cybersecurity and other data-driven applications.
Whether you call it SSL or TLS (yes, everybody’s actually using Transport Layer Security nowadays, but SSL stuck around the way Kleenex did for tissues), the protocol that secures communications between a host and a server is critical for the modern web and yet it can fail in more ways than most people realize.
In this post, we cover the different SSL security threats, their consequences, and how to reduce the risks.
WhoisXML API analyzed 11.6+ million domains registered between 1 and 31 August 2026 that appeared in Newly Registered Domains to identify the most popular registrars, TLD extensions, and other global domain registration trends. This number rose by 4.4% from 11.1+ million NRDs last month.
We also determined the top TLD extensions used by 3.0+ million domains likely registered with malicious intent from the First Watch Malicious Domains Data Feed in August 2026. This number increased by 51.7% from the previous month.
WhoisXML API is proud to be named among the 2026 Inc. 5000 fastest-growing private companies in America, ranking No. 81 in Security and No. 4,682 overall. This marks the company’s ninth appearance on the Inc. 5000, continuing a track record reflected in its Inc. 5000 rankings over the years.
“We are honored to be recognized on this year’s Inc. 5000 and especially proud to rank No. 81 in Security. This recognition affirms our commitment to delivering reliable Internet intelligence that helps organizations strengthen their cyber solutions. We remain grateful for the role we play in promoting a safer Internet,” says WhoisXML API CEO Jonathan Zhang.
We are here to listen. For a quick response, please select your request type. By submitting a request, you agree to our Terms of Service and Privacy Policy.