Request demo

Real-Time Newly Registered Domains

New Registrations Arrive as a Daily File or as Instant Brand Alerts.

The public API has no stream of real-time newly registered domains: it delivers new registrations as a daily file. To catch the ones that imitate your brand, Brand Risk Protection runs the matching and can notify your team the moment it detects one. For anything else, talk to our data team.

Rules

acme contains · fuzzy

  1. garden-tools.example (not a match)

  2. acme-login.example

    Match type: contains

    State: approved

    • dns: on

      Resolution

    • dns_mx: on

      Mail

    • ssl: on

      Certificate

    • http: on

      Web

    Risk score:

    1. 02026-09-14, then
    2. 502026-09-21

    new_fraudulent_domain_detected · frequency instant

  3. northwind.example (not a match)

  4. acrne.example

    Match type: fuzzy

    State: in_review

  5. blue-harbor.example (not a match)

  6. harbor-cafe.example (not a match)

Routes to New Registrations.

Public API

The Daily File

All domains registered in the last day, as CSV or JSON, one request away. The right fit when a day’s delay is acceptable.

Daily feed

Deepinfo Platform

Brand Risk Protection

Rules match newly seen domains against your brand keywords, and a notification rule on new_fraudulent_domain_detected can fire instantly.

Fraudulent Domain Monitoring

Data team

A Conversation About Your Pipeline

If a daily file does not fit your pipeline, tell our data team what it needs. They tell you what can be provided.

Talk to us

If the question is which new domains look like yours, the answer is a list of matches.

Brand Risk Protection runs the matching for you, with match types that include letters from other alphabets the eye cannot tell apart. Each approved match is then monitored for DNS, MX, SSL and HTTP changes, with a risk score over time.

  1. acme.example

    Your keyword

    Each rule pairs it with one match type

  2. acme-login.example

    Name inside · contains

    The name inside a longer label

  3. acrne.example, “rn” in place of “m”

    Typo · fuzzy

    One edit away: a dropped, doubled, swapped or mistyped letter

  4. аcme.example, U+0430 in place of “a”

    resolves as xn--cme-5cd.example

    Lookalike letters · confusable_exact

    Letters swapped for ones that look identical

What to Bring to Our Data Team.

ScopeThe TLDs or name patterns you care about, or the whole registration flow.
UseWhat your pipeline does with each registration, and how quickly it needs to see one.
SystemsHow your team loads data today, so the delivery fits what you already run.
MeanwhileThe daily file and Brand Risk Protection are both available while you talk to us.

Questions About Real-Time Newly Registered Domains

Is there a streaming or webhook endpoint for new registrations?

Not in the public API. New registrations are delivered as a daily file through Daily Registered Domain Names. For other needs, talk to our data team.

What does the daily file cover?

The domains registered in the last day, as of the file_update_time in the response, in CSV or JSON through a download link valid for one hour.

Which kinds of lookalike does Brand Risk Protection match?

Exact names, names that contain your keyword, names a few characters off, and names spelled with confusable characters from other alphabets, alone or combined. See Fraudulent Domain Monitoring.

Can Brand Risk Protection also check domains registered before we set it up?

Yes. A rule with include_past turned on also runs against domains registered before the rule existed.

How is the daily file priced?

Data feeds are priced on their own, by volume and frequency, separately from the platform. See Data & API pricing.

See New Lookalikes as They Are Detected.

Book a demo of Brand Risk Protection on your brand names, or talk to our data team about your registration pipeline.