Monthly Insights Radar - Newly Registered Domains Analytics for OCT 2025

Published: November 20, 2025
Last Updated: Nov 20, 2025

Executive Summary

Over the last month, Oct 2025, we observed 9,192,500 newly registered domains. Nearly 95.3% of these records have cleaned registrar information, while 38.5% include cleaned address details. Additionally, gTLDs continue to outpace ccTLDs. Country, registrar, and TLD leaderboards show a highly concentrated head with a long competitive tail.

Key highlights

  • Total newly registered: 9,192,500
  • TLD mix: gTLDs 83.8% (7,703,504) vs ccTLDs 16.2% (1,488,996)
  • Top country: United States (1,365,082)
  • Top registrar: GMO Internet Group (1,131,877)
  • Top TLD: .com (3,346,426)

TLD-wise analysis

Top 20 TLDs - Full Period

Across the top ~20 TLDs:

  • Total new registrations increased from ~6.49M in September to ~7.41M in October – about a 14% jump.
  • .com remains dominant, but alternative gTLDs and some country-code domains grew even faster, so .com’s share of the pie actually shrank slightly.

Roughly:

  • September
    • Top-20 total: 6,494,595
    • .com: 3,118,738 (≈48% of all domains in this top-20 set)
  • October
    • Top-20 total: 7,414,021
    • .com: 3,346,426 (≈45% of the top-20 set)

So we see a bigger market overall, with .com still the heavyweight but slightly less dominant in relative terms.

The .com vs .xyz Story

In both months, .com and .xyz are far ahead of everything else.

September top 2

  • .com3,118,738
  • .xyz913,776

October top 2

  • .com3,346,426 (+7.3% vs September)
  • .xyz1,102,304 (+20.6% vs September)

Key points:

  • .com is still more than 3× larger than .xyz, but the gap is narrowing:
    • September: .com ≈ 3.4× .xyz
    • October: .com ≈ 3.0× .xyz
  • .xyz is growing almost three times faster in percentage terms. That suggests sustained demand for cheap, flexible, non-brand-restricted names – often used for experiments, growth hacking, and, unfortunately, sometimes for abuse.

Big Movers Among Generic TLDs

If we look at the generic TLDs (gTLDs) beyond .com/.xyz, there are some clear winners.

Approximate changes from September → October:

  • .shop: 210,927 → 373,521 (+77%)
  • .info: 202,709 → 265,973 (+31%)
  • .cn: 87,208 → 112,422 (+29%, ccTLD but worth highlighting)
  • .top: 222,428 → 275,070 (+24%)
  • .xyz: +21% (as above)

The share of the top 5 TLDs in total Newly Registered domains is also depicted in the image below.

TLDs Losing Momentum

While most of the big TLDs grew in absolute terms, a few saw declines compared to September:

  • .online: 206,459 → 177,351 (–14%)
  • .in: –14% as noted above.
  • .vip: 92,483 → 88,915 (–3.9%)
  • .store: 149,347 → 147,115 (–1.5%)

New TLDs entering the top-20 list (October)

  • .bond200,342 new domains, debuting straight at rank #7.
  • .sbs94,933 new domains, entering at rank #17.

TLDs that drop out of the top-20 list (were in September, not in October)

  • .autos79,148 in September.
  • .co73,264 in September.

The charts also highlight several ccTLDs (country-specific extensions):

  • .ru: 144,067 → 168,838 (+17%)
  • .cn: 87,208 → 112,422 (+29%)
  • .uk: 96,351 → 106,122 (+10%)
  • .br: 77,508 → 81,235 (+5%)
  • .de: 120,608 → 119,317 (about –1%, essentially flat)
  • .in: 83,552 → 72,054 (–14%)
  • .cc: 108,028 → 108,848 (flat/slight +0.8%)

Daily Dynamics - Top 5 TLDs

.com

  • .com shows very stable daily volume, mostly between 110k and 125k registrations, with regular sharp dips to ~75–85k that look like weekend/maintenance effects rather than real demand drops.
  • Across the month, the highs stay consistently strong, and the second half of the month does not show any meaningful slowdown compared to the first half.
  • This pattern suggests steady, mature demand for .com with a strong weekly cycle; short-term noise aside, we expect .com to remain flat-to-slightly-up in the coming months at similarly high daily volumes.

.xyz

  • .xyz is the most volatile of the group: it swings from just a few thousand registrations to massive spikes above 60k–90k on several days.
  • These bursts are mixed with mid-range days (15k–45k), so the monthly average ends up much higher than during the very quiet early period.
  • This pattern is consistent with bulk or campaign registrations driving the TLD, and we expect .xyz to continue showing large, unpredictable spikes but remain one of the highest-growth non-.com spaces overall.

.shop

  • .shop begins the month around 8k–10k per day, then mid-month it jumps to 20k+ registrations on multiple days, with several strong spikes above 15k later in the month.
  • Even on “quiet” days in the second half, volumes tend to stay above the early-month lows, suggesting the floor for activity has moved higher.
  • Overall, .shop looks like a high-growth e-commerce TLD with campaign-driven peaks, and the data supports a bullish short-term trend with elevated average daily registrations.

.top

  • .top shows a classic saw-tooth pattern, oscillating between ~6k lows and 11–13k highs throughout the entire month without any long flat periods.
  • Peaks are spread across the calendar, and the final week still reaches similar or slightly higher highs than the start of the month.
  • That points to stable but noisy demand; the likely trajectory is sideways to mildly upward, with ongoing short bursts of heavy registration activity.

.info

  • .info starts the month in the 3k–9k range, then shows several sharp mid-month spikes, including a standout day close to 18k new registrations.
  • In the last third of the month, daily volumes stabilize at a higher band (around 7k–15k) than at the beginning, indicating a rising baseline after those spikes.
  • This behaviour points to promotion-driven surges on top of a growing base, so the short-term trend for .info is upward, with continued volatility likely.

Country-wise analysis

Top 20 Countries - Full Period

New registrations are highly concentrated, with the United States far ahead of the pack.

Comparison with SEP 2025

  • United States: October has 1,365,082 new domains, up 26,356 (~+2%) from September.
  • Iceland: October has 792,444 new domains, up 90,239 (~+13%) from September.
  • Germany: October has 46,330 new domains, up 4,950 (~+12%) from September.
  • China: October has 103,951 new domains, up 7,143 (~+7%) from September.
  • Brazil: October has 103,570 new domains, up 6,836 (~+7%) from September.

Downfall / Declining countries

  • British Virgin Islands: October has 36,510 new domains, down 54,212 (~−60%) from September.
  • Netherlands: October has 57,769 new domains, down 80,731 (~−58%) from September.
  • Japan: October has 16,945 new domains, down 7,767 (~−31%) from September.
  • Italy: October has 19,645 new domains, down 4,055 (~−17%) from September.

New entrant in October

  • Lithuania: October has 77,266 new domains, a fresh new entry that was not in September’s chart at all.

Dropped out completely

  • South Korea: Had 17,819 new domains in September but does not appear in October, so it effectively dropped by the full 17,819 (−100%).

Key takeaways

  • United States and Iceland still lead and both grew, so a big share of new domains is clustering in these two countries.
  • Netherlands and British Virgin Islands saw heavy drops, which likely reflects changes in registrar activity or promo campaigns ending.
  • Lithuania’s strong new entry and South Korea’s complete drop-out show how quickly domain activity can shift between countries from one month to the next.
  • A group of countries like China, Brazil, Germany, France, UK, Canada, India and Spain are steadily growing, hinting at healthy and ongoing domain demand across multiple regions.

Share of Top 5 Countries - Pie View

Top five countries together contribute ~79% of all newly registered domains this period.

Implication: Brand protection, threat monitoring, and registrar partnerships should prioritize these five geographies, while keeping anomaly detection on the “Others” bucket for sudden regional bursts.

Daily Dynamics - Top 5 Countries

United States

  • The US starts the month around 50k–55k new domains per day.
  • Mid-month it spikes to about 75k, then gradually cools into the 30k–40k range with one low point near 22k.
  • Despite that easing, daily volumes stay high, so the US remains the largest but slightly softening source of new domains.

Iceland

  • Iceland runs at a high level, usually 20k–30k new domains per day.
  • There’s a strong surge above 40k in the middle of the month, followed by a sharp dip near 13–14k and then a recovery.
  • Even with those swings, the country ends the month back in the mid-20k range, so demand remains strong overall.

Canada

  • Canada stays in a tight band of about 3.2k–4.5k new domains per day.
  • You see gentle weekly waves, with short dips to around 2.6k–3.0k and quick recoveries.
  • Overall the line is quite flat, pointing to steady, mature demand without big shocks.

China

  • China’s daily numbers swing mostly between 2k and 4k, with one early spike above 6k.
  • Mid-month includes a couple of smaller peaks around 4.7k–4.9k, then the line settles back near 3k.
  • The pattern is choppy but the baseline looks broadly stable with small upward bumps.

Brazil

  • Daily registrations mostly sit between 2k and 4k, with a fairly low baseline.
  • There are two clear spikes, one above 10k early in the month and another near 9k mid-month, likely campaign-driven.
  • After those peaks, counts settle back toward the 3k range, so the trend looks volatile but generally stable.


Registrar-wise Analysis

Top 20 Registrars - Full Period

New registrations are highly concentrated among a small set of registrars, with two clear leaders. October is the month GMO surges to #1, adding over 300k domains and pushing GoDaddy into second place after GoDaddy led in September.

Strong growers in October

  • Hostinger369,288 vs 249,791, gain of +119,497 (~+48%); moves up the table as one of the fastest risers.
  • Namesilo209,833 vs 133,929, gain of +75,904 (~+57%); big jump into the upper mid-tier.
  • Dynadot499,104 vs 425,537, gain of +73,567 (~+17%); strengthens its spot as a major registrar.
  • Squarespace Domains257,137 vs 233,764, gain of +23,373 (~+10%).

New entrants & drop-outs (top list)

  • New in October:
    • Name SRS AB135,463 new domains.
    • Network Solutions42,570 new domains.
    • Alibaba Cloud / Hichina40,331 new domains.
  • Present in September but missing in October:
    • Hosting Concepts / registrar.eu142,690 in September.
    • Unstoppable Domains121,477 in September.
    • Key-Systems44,166 in September.

Registrars in decline

  • Gname.com224,547 vs 286,904, loss of −62,357 (~−21.7%).
  • Porkbun115,304 vs 150,188, loss of −34,884 (~−23.2%).
  • Sav.com46,856 vs 56,169, loss of −9,313 (~−16.6%).
  • Name.com75,187 vs 91,999, loss of −16,812 (~−18.3%).

Leaderboard (absolute counts):

What this says

  • October is the month GMO surges to #1, adding over 300k domains and pushing GoDaddy into second place after GoDaddy led in September.
  • Overall volume is still heavily concentrated in the top three (GMO, GoDaddy, Namecheap), but mid-tier players like Hostinger, Dynadot, Namesilo, and Spaceship are growing fast.
  • At the same time, Gname, Porkbun, Sav, and Name.com see clear pullbacks, and a few registrars rotate in and out of the top list, showing how promotions and bulk deals can quickly shift where new domains are registered.

Share of Top 5 Registrars - Pie View

Within the top five registrars, the mix for this period is:

Implication: While GMO and GoDaddy lead, the aggregate of non-top-5 registrars (“Others”) is still the single largest slice, so monitoring must extend beyond the leaders.

Daily Dynamics - Top 5 Registrars

GMO Internet Group

  • Activity is extremely spiky: some days are near zero, others jump to 80k–110k new domains.
  • Big batches land around the middle and end of the month, driving most of GMO’s total volume.
  • Trend-wise, the largest spikes get bigger toward month-end, pointing to increasing bulk activity.

Godaddy, LLC

  • Daily counts are stable in the 25k–35k band, with gentle weekly dips and recoveries.
  • There’s one standout peak around 36k+ late in the month, but no wild swings.
  • Overall pattern is steady and mature, with a slight late-month lift.

NameCheap, INC

  • The month starts modestly around 5k–10k, then jumps mid-month to 20k+ per day.
  • After that shift, volumes mostly stay between 13k and 22k, higher than the early days.
  • This looks like a step-change upward, possibly from a new campaign or pricing push.

Spaceship, Inc

  • Early October sits around 14k–19k daily, with a big spike close to 29k.
  • Mid to late month brings more frequent peaks in the 27k–29k range and a higher average.
  • Overall, Spaceship shows clearly rising momentum, with stronger volumes as the month progresses.

Dynadot Inc

  • Most days sit in the 5k–8k range, but there are several sharp peaks above 13k–17k.
  • Spikes appear roughly weekly, suggesting batch or promo-driven registration bursts.
  • The second half of the month stays a bit higher than the first, so the overall bias is slightly upward.

Cleaned vs Redacted - Data Quality Snapshot

Registrar Details

  • Total registrar-detail records: 9,192,500.
  • 8,762,122 (95.3%) registrar fields are cleaned and present.
  • Just 430,378 (4.68%) registrar fields are redacted.
  • So registrar information is available for about 19 out of 20 domains.

What it shows

  • Lean on registrar, IANA ID, status codes, and creation/expiry dates for coverage-rich enrichment.
  • Great for trend analysis (NRDs per registrar), policy enforcement, and escalation pathways (registrar abuse desks).

Why it matters

  • Great foundation for concentration analysis, spike attribution, and enforcement routing.
  • Enables robust pivoting (Registrar → TLD → Country) to explain anomalies and target actions.

Where to use it

  • Security Copilot & Phishing Agent: show registrar + NRD age by default; surface contact/address only when present & permitted.
  • Brand protection: registrar hotspots, fast-flux patterns, and address/contact reuse for impersonation campaigns.
  • Abuse operations: registrar data for takedown routing and SLA tracking; address/contact (if present) for evidence strength.
  • Analytics: KPI on NRDs by registrar, % with contact/address present, median first-seen age—to measure control effectiveness over time.

Action

  • Build registrar-level baselines and anomaly alerts; on spike days, drill into the registrar’s TLD/country mix.
  • Use registrar signals early in risk scoring and takedown playbooks.

Address Details

  • Total address records: 9,192,500.
  • 5,649,216 (61.5%) address fields are redacted.
  • 3,543,284 (38.5%) address fields are cleaned and usable.
  • So roughly 2 out of 5 domains still expose a usable postal address.

What it shows

  • Expect low coverage for geo/person-level attribution from WHOIS address alone; treat any address hit as high-value but sparse.
  • Use cleaned addresses mainly for entity clustering (same org/address across many domains), abuse repeat-offender detection, and escalations that need a physical trail.

Why it matters

  • Solid coverage for geo-segmentation, risk scoring by country/region, and regional enforcement workflows.
  • Enables address-based clustering when emails/phones are missing.

Where to use it

  • Brand abuse & takedown packages (when present, strengthens evidence).
  • Risk scoring feature: “WHOIS address present?” (+weight) and address reuse count (signals mass registrations).

Contact Details

  • Total contact records: 9,192,500 (same population).
  • 8,795,984 (95.7%) contact fields are redacted.
  • Only 396,516 (4.31%) contact fields are cleaned and available.
  • In practice, fewer than 1 in 20 domains now expose direct contact details.

What it shows

Contact-level PII (name, email, phone) is heavily redacted for the vast majority of new registrations.

Why it matters

  • Direct outreach and owner attribution are rarely possible at registration time.
  • Detection must emphasize non-PII signals: registrar/TLD, nameservers, hosting/SSL, passive DNS, CT logs.

Action

  • Prioritize infrastructure & behavior features in classifiers.
  • Track the cleaned-contact share as a pipeline health metric; any uplift materially improves enrichment ROI.
  • Maintain registrar-specific expectations - some providers are consistently stricter.

Newly / Newly Cleaned - Daily Trend

  • Daily newly registered domains stay roughly in the 230k–400k range through the month.
  • Newly_cleaned records are much smaller, usually around 5k–15k per day.
  • There are two clear cleaning spikes: one around 110k and another around 80k records on specific days.
  • Overall, only a small fraction (typically <5%) of each day’s new domains get cleaned on the same day.

gTLDs vs ccTLDs

  • Total newly registered domains: 9,192,500.
  • 7,703,504 (83.8%) are gTLDs (.com, .net, .xyz, etc.).
  • 1,488,996 (16.2%) are ccTLDs (country codes like .de, .uk).
  • New registrations are therefore heavily skewed toward gTLDs (~5:1 ratio).

Why it matters

  • Brand protection, NRD blocking, and abuse monitoring should default to gTLD coverage, with .com and other high-volume gTLDs at the top of the list.
  • ccTLDs still represent 1 in 5 new domains - large enough to warrant targeted watchlists, especially for markets with promotional bursts.

Action prompts

  • Keep separate alert thresholds for gTLD and ccTLD baselines.
  • On spike days, pivot by country ↔ TLD ↔ registrar to isolate the driver.
Author's Profile Picture
Usama Shabbir

Product Lead

A product lead with deep expertise in cybersecurity, adept at analyzing cyber threat data to enhance product resilience against emerging security threats.


Related Posts