Domain Activity Highlights—March 2023

Domain Activity Highlights—March 2023

Of the millions of domains registered during 1–31 March 2023, WhoisXML API researchers studied a randomized sample of 31,000 domains to determine commonalities in their registrant countries, registrars, and TLDs. Part of our analysis also included looking into the domain registration volume for the riskiest or most-abused TLDs.

We also analyzed domain text string usage to detect potentially emerging trends. Check out our findings below and links to the threat reports our researchers put together using our domain, DNS, and IP intelligence sources.


Zooming in on the March NRDs

TLD Distribution

The top TLD extension remained .com, accounting for 60% of the domains registered in March. Trailing significantly behind were .xyz and .net with 4% of the total registration volume each. The .org, .online, and .top TLDs followed closely with 3% shares each. The e-commerce-focused .shop and .store extensions also made the top 10, each accounting for 2% of the total registration volume. Rounding out the top 10 were .info and .site, also with 2% shares each.

No alt text provided for this image

About 10.6% of the March NRDs belonged to the riskiest TLD extensions named by Infoblox in their Q4 2022 Cyber Threat Report . The table below shows some of the TLDs with the worst reputations in terms of number of malicious domains and were considered as high-confidence and high-risk TLDs.

No alt text provided for this image

Contact us to get access to the full list.


WHOIS Data Redaction

Only 8% of the March NRDs had public registrant details, highlighting the massive implementation of WHOIS data redaction.

No alt text provided for this image

Based on the NRDs’ registrant organizations, about 84% had redacted WHOIS records, with most employing the services of privacy protection companies. Analyzing the redaction methods, we found that the top WHOIS privacy protection providers were Domains By Proxy (24%); Withheld for Privacy EHF (11%); Contact Privacy, Inc. (7%); and Privacy Protect LLC (3%). The chart below shows the top 10 most common redaction providers.

No alt text provided for this image


Registrar Distribution

As in January and February , GoDaddy dominated the list of top registrars, accounting for 22% of the total domain registration volume. Almost the same registrars completed the top 10, too. Namecheap took second place with a 13% share, followed by Google and PDR Ltd. with 7% and 5% shares, respectively.

Rounding up the top 10 registrars were Alibaba (4%); Tucows (3%); GMO (3%); Hostinger (3%); Hong Kong Juming Network Technology Co., Ltd. (2%); and Gransy S.R.O. (2%). These are summed up in the following chart.

No alt text provided for this image

The top 10 registrars accounted for 63% of the total registration volume. The rest of the domains were distributed across more than 350 other registrars.


Top Registrant Countries

About 44% of the March NRDs were registered in the U.S., while Iceland and Canada accounted for 12% and 10% of the registrations, respectively. Other countries that made it to the top 10 registrant countries in March were China, Japan, the Netherlands, the U.K., Russia, Brazil, and Vietnam.

No alt text provided for this image


Appearance of Common Strings among the SLDs

Xn was still among the most-used text strings for months now, highlighting the continued popularity of internationalized domain names (IDNs). Also, adjacent generic terms, such as online, home, and service remained common among the NRDs.

Other repeated strings were tech terms, such as? ai, digital, app, and web. The word cloud below shows these and other common strings.

No alt text provided for this image


In the News

Among March’s most significant events was the Silicon Valley Bank turmoil. How did the DNS reflect it? The chart below shows a snapshot. It specifically shows a spike in the registration of domains containing siliconvalley in the week of the bank’s slide. The volume dwindled toward the end of March.

No alt text provided for this image


Cybersecurity through the DNS Lens

Below are some of the threat reports we published in March.

You can find more reports created in the past months here .

________________________________________________________________

Feel free to contact us for more information about the products and capabilities used to analyze domain registration events or support other use cases.

要查看或添加评论,请登录

社区洞察

其他会员也浏览了