Analysis of nearly 22 million newly registered domains (NRDs) from July–September 2024 shows a 2.05% quarter-over-quarter increase, with notable shifts in gTLD and ccTLD activity. The report highlights .com and .cn as leading TLDs, GoDaddy and Amazon Technologies as major infrastructure players, and several TLDs appearing frequently among domains tagged as IoCs. #GoDaddy #AmazonTechnologies
Keypoints
- 22 million newly registered domains (NRDs) were analyzed for Q3 2024 (July–September).
- Overall NRDs rose 2.05% compared to Q2 2024.
- gTLD registrations declined by 0.63% while ccTLD registrations increased by 11.24%.
- .com remained the most popular gTLD; .cn led among ccTLDs.
- GoDaddy was the top NRD registrar with a 16.31% market share.
- Amazon Technologies accounted for 4.15% of NS resolutions in the past year, indicating major DNS/hosting presence.
- 17.29% of malicious domains tagged as IoCs were .com; other IoC-heavy TLDs include .org, .net, .biz, .ru, and .cn.
MITRE Techniques
- [T1071] Command and Control – Uses multiple command-and-control domains to maintain communication with compromised systems (‘Utilizes multiple command and control domains to maintain communication with compromised systems.’)
Indicators of Compromise
- [domain] Malicious TLDs seen as IoCs – .com, .org, and 8 more (including .net, .biz, .info, .bazar, .life, .tickets, .ru, .cn)
Read more: https://circleid.com/posts/global-domain-activity-trends-seen-in-q3-2024 – get from article