Evaluation of DNS pre-registration data to predict future DNS traffic

A device for predicting future network traffic, comprising:

• a memory containing instructions;
• and
• at least one processor, operably connected to the memory, that executes the instructions to perform a method comprising:
• receiving non-existent domain (NXD) requests from a plurality of name servers for one or more candidate domains over a first period of time;
• determining a total number of NXD requests sent by each of the plurality of name servers over the first period of time;
• determining the size of each of the plurality of name servers based on the determined total number of NXD requests sent by each name server over the first period of time;
• and
• based on at least the determined size of each of the plurality of name servers, predicting at least one of an expected name-in-use response level for the one or more candidate domains, an expected click traffic for the one or more candidate domains, or a combination thereof.

A non-transitory computer readable storage medium comprising instructions for causing one or more processors to perform a method, the method for predicting future network traffic, comprising:

• receiving non-existent domain (NXD) requests from a plurality of name servers for one or more candidate domains over a first period of time;
• determining a total number of NXD requests sent by each of the plurality of name servers over the first period of time;
• determining the size of each of the plurality of name servers based on the determined total number of NXD requests sent by each name server over the first period of time;
• and
• based on at least the determined size of each of the plurality of name servers, predicting at least one of an expected name-in-use response level for the one or more candidate domains, an expected click traffic for the one or more candidate domains, or a combination thereof.

A method for predicting future network traffic, comprising:

• receiving non-existent domain (NXD) requests from a plurality of name servers for one or more candidate domains over a first period of time;
• determining a total number of NXD requests sent by each of the plurality of name servers over the first period of time;
• determining the size of each of the plurality of name servers-based on the determined total number of NXD requests sent by each name server over the first period of time;
• identifying each of the one or more candidate domains as an Original Domain or as a Re-registered domain, wherein the Re-registered domain is a domain that was previously registered but the registration has since lapsed;
• and
• based on at least the determined size of each of the plurality of name servers, the identification, and received NXD requests, predicting at least one of expected name-in-use response levels for the one or more candidate domains, expected click traffic for the one or more candidate domains, or a combination thereof.

The method of 19, further comprising:

• determining whether the received NXD requests for Re-registered domains are associated with machine-generated internet activity;
• filtering the received NXD requests to remove NXD requests associated with machine-generated internet activity for Re-registered domains;
• and
• making the prediction based on at least the identification and filtered NXD requests.

A device for predicting future network traffic, comprising:

• a memory containing instructions;
• and
• at least one processor, operably connected to the memory, that executes the instructions to perform a method comprising:
• receiving non-existent domain (NXD) requests from a plurality of name servers for one or more candidate domains over a first period of time;
• determining a total number of NXD requests sent by each of the plurality of name servers over the first period of time;
• determining the size of each of the plurality of name servers-based on the determined total number of NXD requests sent by each name server over the first period of time;
• identifying each of the one or more candidate domains as an Original Domain or as a Re-registered domain, wherein the Re-registered domain is a domain that was previously registered but the registration has since lapsed;
• and
• based on at least the determined size of each of the plurality of name servers, the identification, and received NXD requests, predicting at least one of expected name-in-use response levels for the one or more candidate domains, expected click traffic for the one or more candidate domains, or a combination thereof.

The device of 23, wherein the at least one processor is further operable to execute the method comprising:

• determining whether the received NXD requests for Re-registered domains are associated with machine-generated internet activity;
• filtering the received NXD requests to remove NXD requests associated with machine-generated internet activity for Re-registered domains;
• and
• making the prediction based on at least the identification and filtered NXD requests.

A non-transitory computer readable storage medium comprising instructions for causing one or more processors to perform a method, the method for predicting future network traffic, comprising:

• receiving non-existent domain (NXD) requests from a plurality of name servers for one or more candidate domains over a first period of time;
• determining a total number of NXD requests sent by each of the plurality of name servers over the first period of time;
• determining the size of each of the plurality of name servers-based on the determined total number of NXD requests sent by each name server over the first period of time;
• identifying each of the one or more candidate domains as an Original Domain or as a Re-registered domain, wherein the Re-registered domain is a domain that was previously registered but the registration has since lapsed;
• and
• based on at least the determined size of each of the plurality of name servers, the identification, and received NXD requests, predicting at least one of expected name-in-use response levels for the one or more candidate domains, expected click traffic for the one or more candidate domains, or a combination thereof.

The non-transitory computer readable storage medium of 27, further comprising:

• determining whether the received NXD requests for Re-registered domains are associated with machine-generated internet activity;
• filtering the received NXD requests to remove NXD requests associated with machine-generated internet activity for Re-registered domains;
• and
• making the prediction based on at least the identification and filtered NXD requests.