Blog

This blogpost provides security insights on the threats blocked by Quad9 DNS between January and June 2026. This time we analyzed the top 50 domains blocked by us, which together accounted for more than 14 billion blocked DNS queries in six months.

Quad9 has expanded its privacy protections by locally answering all reverse DNS queries for private and special-use address spaces.

Privacy is, always has been, and always will be paramount at Quad9, so we want to take a few moments to explain the updates made to our privacy policy.

On 8 May 2026, Quad9 experienced outage intervals up to ~40 minutes for our primary zone “quad9.net” due to a failed validation step between our primary hidden authoritative servers and PCH’s anycast network, which we use for externally-facing DNS authoritative services.

Quad9 is enabling DNSSEC validation on its remaining non-validating resolver address. Starting June 15, 2026, DNSSEC strict validation will be active across every Quad9 service endpoint.

As part of our continuous efforts to improve the quality of the services we offer, we are migrating to a new Status Page platform effective April 22.

At Quad9, we aim to recognize the people behind the infrastructure that keeps the internet secure and reliable for millions of users worldwide. This staff highlight features Principal Engineer, Darren Kara.

Quad9 has enabled DNS over HTTP/3 (DoH3) and DNS over QUIC (DoQ) across its global resolver network.

Quad9 believes that DNSSEC is required for a secure DNS and will only implement Negative Trust Anchors (NTAs) for the shortest time possible when it believes the greater harm would come from taking no action.

Quad9 is looking for Threat Intelligence partners who specialise in regional threats in the Asian regions.