Every domain registered yesterday, in one batch.
Every domain name registered in the previous 24 hours across all monitored TLDs. Delivered as a daily batch from registry zone files, CZDS feeds, and partner sources.
One row per newly registered domain.
The Daily Registered Domain Names Feed surfaces the front edge of the registration system. Every new domain that appeared in registry data since the previous snapshot, in a single file delivered each day.
Each record is the registered domain itself. The feed merges entries observed in registry zone files (where available), ICANN CZDS for gTLDs, ccTLD partner feeds, and Deepinfo's own continuous discovery pipeline. The window is the previous 24 hours; the cutover happens once per day at the same UTC offset.
This is the right input for brand-protection workflows, lookalike-domain monitoring, and any system that needs to react to new registrations within a day. Pair with the Whois Lookup API to enrich each record with registrar, registrant, and dating information.
Daily batch, delivered as a download.
A single API call returns the metadata for the day's snapshot. Authenticate with an API token scoped to the feed.
Delivery
Bulk download. The API call returns metadata plus a signed download_url. Download via HTTPS; S3 and SFTP available for existing customers.
Format
JSON or CSV. The response payload reports the format, file size in bytes, line count, and last update timestamp.
Refresh cadence
Daily. The snapshot for the previous 24 hours is built once per day at the same UTC offset. Use file_update_time to track.
Authentication
API token in the request header. Tokens are scoped per feed. Full integration reference at docs.deepinfo.com.
What you actually get.
The API response, with the metadata for the latest daily batch:
{
"download_url": "https://feeds.deepinfo.com/daily-registered-domains/2026-05-02/daily-registered-domains.json.gz?...",
"file_format": "json",
"file_size": 6248137,
"file_update_time": "2026-05-02T03:14:27Z",
"line_count": 312847
}A few representative lines from the JSON-formatted file at download_url:
{"domain":"new-customer-portal.com"}
{"domain":"acmebrand-secure-login.net"}
{"domain":"verify-account-update.io"}
{"domain":"shopdomain.shop"}
{"domain":"my-fresh-startup.co"}Workflows this feed powers directly.
Phishing Detection and Prevention
Catch lookalike registrations the day they appear. The most damaging campaigns weaponize the domain within hours of registration.
Read the use caseBrand Impersonation Protection
Detect new brand-impersonating registrations before they reach customers. Route confirmed matches into Managed Takedown.
Read the use caseThreat Hunting
Hunt across new registration patterns by registrar, name server, registrant signal, or naming convention.
Read the use case“Daily new registrations land in our typosquat detection job at midnight UTC. The CZDS plus partner-source coverage catches gTLD and ccTLD activity that single-source feeds miss by margin.”
Other daily feeds.
Every domain dropped yesterday, in one batch.
Every domain name deleted, expired, or dropped from registration in the previous 24 hours.
See feed DATA FEEDEvery subdomain first seen yesterday, in one batch.
Every subdomain identified for the first time in the previous 24 hours.
See feed DATA FEEDEvery domain that changed yesterday, in one batch.
Every domain name with Whois or DNS changes in the previous 24 hours.
See feedGet yesterday's registrations, then every day after.
We'll set up token access and walk through how teams plug this feed into brand-protection or hunt workflows.