Aggregate domain analytics across the entire internet.

Sometimes the question isn't about a specific domain. It's about patterns at internet scale: how registrations are trending in a TLD, which keywords are spiking in new domain creation, what the seasonality of brand-imitation registrations looks like. Domain Intelligence is the aggregate analytics layer over Deepinfo's 400 million domain corpus.

WHAT THIS DOES

Statistical views over the full domain corpus.

Domain Intelligence aggregates analytics from Deepinfo's 400M+ domain corpus into queryable statistical views. Registration trends over time, TLD distribution analysis, keyword frequency in new registrations, registration timeline distributions, registrar share-of-voice, and similar aggregate metrics. The view above the haystack, useful when the investigation question is structural rather than specific.

Use cases include trend research (where is brand-imitation activity concentrating), brand-monitoring planning (which TLDs to monitor for our brand vs which to ignore), threat-landscape analysis (which keyword patterns are appearing in newly-registered phishing infrastructure), and academic / journalistic research (the kind of question a generic web search can't answer).

HOW IT WORKS

Three analytics dimensions, one corpus.

Time-series aggregates surface trends. Distribution analytics surface structure. Pattern queries surface specific keyword and regex matches across the corpus.

Time-series aggregates.

Registration trends over time, daily/weekly/monthly aggregates, comparison windows. Useful for spotting registration spikes that correlate with attack waves or major brand events.

Distribution analytics.

TLD share-of-voice, registrar share-of-voice, country-code distribution, keyword frequency in registrations. Useful for structural questions about the corpus.

Pattern queries.

Keyword pattern matching (find every domain matching *-secure-login*), regex queries on the domain corpus, structural pattern detection. Useful for threat research and brand-defense planning.

WHAT IT SURFACES

Examples of analytics queries Domain Intelligence runs.

TLD registration trends

Registration counts per TLD over arbitrary time windows, with comparison-window deltas.

Keyword frequency

Frequency of arbitrary keywords or substrings in newly-registered domains.

Registrar share-of-voice

Registrar volume by TLD and time window, useful for structural questions about the registration ecosystem.

Country-code distribution

ccTLD and country-of-registration distribution across the corpus and within filters.

Registration timeline

History of registration and re-registration cycles for individual domains over their full lifecycle.

Pattern frequency

Aggregate frequency for arbitrary keyword patterns or regex matches across the corpus.

PART OF DSI

Aggregate analytics complement specific search.

Domain Intelligence answers structural questions ("how is this category trending"). Domain Search answers specific questions ("which domains match these criteria"). The two complement each other across investigation types: trend research uses Intelligence; specific-target investigation uses Search. Vulnerability Intelligence and Vulnerability Search apply the same pattern to the CVE corpus.

← Back to DSI

“Domain-level patterns at internet scale are not something most teams have access to. For trend analysis on registration spikes or TLD abuse, the aggregate view tells us things individual lookups never would.”

— Senior Threat Researcher, National CERT
EXPLORE THE PATTERNS

Run aggregate queries against the domain corpus.

Book a demo. We'll run sample analytics queries scoped to your research question.

Request a demo