Home / Industry

Q2 2022 Domain Registration Trends Report

Protect your privacy:  Get NordVPN  [ Deal: 73% off 2-year plans + 3 extra months ]
10 facts about NordVPN that aren't commonly known
  • Meshnet Feature for Personal Encrypted Networks: NordVPN offers a unique feature called Meshnet, which allows users to connect their devices directly and securely over the internet. This means you can create your own private, encrypted network for activities like gaming, file sharing, or remote access to your home devices from anywhere in the world.
  • RAM-Only Servers for Enhanced Security: Unlike many VPN providers, NordVPN uses RAM-only (diskless) servers. Since these servers run entirely on volatile memory, all data is wiped with every reboot. This ensures that no user data is stored long-term, significantly reducing the risk of data breaches and enhancing overall security.
  • Servers in a Former Military Bunker: Some of NordVPN's servers are housed in a former military bunker located deep underground. This unique location provides an extra layer of physical security against natural disasters and unauthorized access, ensuring that the servers are protected in all circumstances.
  • NordLynx Protocol with Double NAT Technology: NordVPN developed its own VPN protocol called NordLynx, built around the ultra-fast WireGuard protocol. What sets NordLynx apart is its implementation of a double Network Address Translation (NAT) system, which enhances user privacy without sacrificing speed. This innovative approach solves the potential privacy issues inherent in the standard WireGuard protocol.
  • Dark Web Monitor Feature: NordVPN includes a feature known as Dark Web Monitor. This tool actively scans dark web sites and forums for credentials associated with your email address. If it detects that your information has been compromised or appears in any data breaches, it promptly alerts you so you can take necessary actions to protect your accounts.

Several factors influence domain registration trends, including the latest digital technology developments, global news, and current events. WhoisXML API aims to stay on top of these trends, aided by our satellite view of the Domain Name System (DNS). We tracked the digital spillovers of the Russia-Ukraine war two weeks after it began and saw how the news was reflected in domain registrations. We also noticed that even this year’s Oscars slapping incident drove relevant domain registrations.

These are only a few examples of domain registration drivers we monitored early this year. For the second quarter of 2022, we followed the digital trails of six significant drivers in our Domain Registration Trends Report Q2 2022 Edition. These domain registration stimuli can be categorized into Q2-specific and all-time domain registration drivers.

You may download the full report from our website. We provided an overview of our analyses and findings below.

Q2-Specific Domain Registration Drivers

Celebration-Related Trends

Events that happened in Q2 2002 were Mother’s Day and Father’s Day on 8 May and 19 June, respectively. We tracked related domains added throughout the quarter and noticed spikes in the week preceding the events. These domains contained the strings “mother” and “father,” alongside “day.” The chart below reflects the trend.

We also studied the registration trend for domains ending in .mom, and the spikes were pretty significant. One occurred the week before Mother’s Day, while the other happened in the week ending 21 May.

News-Related Trends

Another event in Q2 was Elon Musk’s offer to purchase Twitter and the latter’s subsequent acceptance of said offer on 25 April 2022. The news broke the Internet, and we felt the tremors in the DNS. The registration of domains containing Twitter and Elon Musk significantly increased during that week, as you can see in the following chart.

All-Time Domain Registration Drivers

Seasonal Themes

We tracked domain registration trends related to the tax season. Although it began as early as 24 January 2022, and the tax deadline was set on 18 April 2022, the number of new tax-related domains was higher in Q2 than Q1. Overall, there seems to be a consistent flow of domains registered for tax-related strings over the months.

World Event-Themed Registrations

The Ukraine-Russia war has been going on since February, but domain registrations exceeded pre-war levels in Q2. As the war continues, more related domains may be added.

Blockchain-Related Trends

We’ve been monitoring domain registrations related to cryptocurrencies since last year. In Q2, we added non-fungible tokens (NFTs) and decentralized financial (DeFi) platforms to the list, as these technology advancements consistently became phenomenal. We focused on cybersquatting domains targeting the most popular cryptocurrencies, NFTs, and DeFi platforms.

The quarter’s first two weeks accounted for most of the domain registrations. While registrations the following weeks were erratic, nearly 1,000 new domains were still added per week until the volume started dwindling in June.

Industry-Related Registrations

We mapped the digital footprints of several industries, such as car dealerships and container shipping companies. Still, one of the most significant trends was the relentless threat of e-commerce cybersquatting domains.

In Q2, we found more than 16,000 cybersquatting resources targeting some of the most frequently visited online shopping platforms. The registrations consistently exceeded 1,200 domains per week from the beginning of the quarter until the first two weeks of June.

Malicious Properties Alert

Given that domains and subdomains are among the primary vehicles for phishing, spamming, scams, and malware distribution, we also analyzed the properties for malicious usage. Out of more than 54,000 properties under all registration drivers, about 2% were malicious. Tax-related properties accounted for more than half of them. The chart below shows how the malicious properties were distributed across the six registration drivers identified for Q2 2022.


We will continue monitoring the DNS for significant domain registration drivers and performing deeper analysis and contextualization using our WHOIS, IP, and DNS intelligence.

If you wish to perform a similar investigation and analysis, feel free to contact us for research collaboration.

By WhoisXML API, A Domain Research, Whois, DNS, and Threat Intelligence API and Data Provider

Whois API, Inc. (WhoisXML API) is a big data and API company that provides domain research & monitoring, Whois, DNS, IP, and threat intelligence API, data and tools to a variety of industries.

Visit Page

Filed Under

Comments

Commenting is not available in this channel entry.
CircleID Newsletter The Weekly Wrap

More and more professionals are choosing to publish critical posts on CircleID from all corners of the Internet industry. If you find it hard to keep up daily, consider subscribing to our weekly digest. We will provide you a convenient summary report once a week sent directly to your inbox. It's a quick and easy read.

I make a point of reading CircleID. There is no getting around the utility of knowing what thoughtful people are thinking and saying about our industry.

VINTON CERF
Co-designer of the TCP/IP Protocols & the Architecture of the Internet

Related

Topics

New TLDs

Sponsored byRadix

Threat Intelligence

Sponsored byWhoisXML API

Brand Protection

Sponsored byCSC

IPv4 Markets

Sponsored byIPv4.Global

Domain Names

Sponsored byVerisign

Cybersecurity

Sponsored byVerisign

DNS

Sponsored byDNIB.com