Request demo

Real-Time Updated Domains

Hear About Changes on the Domains You Watch.

The public API has no stream of real-time updated domains: it reports registration changes as a daily file. On the domains you monitor in the Deepinfo Platform, WHOIS, DNS and certificate changes arrive as notifications, instantly or on a schedule. For anything beyond that, talk to our data team.

Scanall checked

acme.example monitored · WHOIS, DNS, SSL

  1. WHOISasset_whois_changed

    registrar and expiry unchanged

    09-17 → 09-24

  2. DNS

    MX now mail.hosting.example · was mail.acme.exampleraises the event asset_dns_changed

    09-17 → 09-24

    changed
  3. SSLasset_ssl_changed

    same certificate · expires 2026-11-20

    09-17 → 09-24

Notification
  • instantly (chosen)
  • hourly
  • daily
  • weekly
  • monthly

Layers compared · 1 change

Receive Change Alerts on Your Assets.

External Attack Surface Management scans each monitored asset layer by layer and keeps each layer’s history. When the WHOIS, DNS or certificate layer of an asset changes, the platform raises a change event.

Each notification rule picks its events and how often it reports them: instantly, or as an hourly, daily, weekly or monthly digest.

WHOISasset_whois_changed: the registration record of a monitored asset changed
DNSasset_dns_changed: its DNS records changed
SSLasset_ssl_changed: its certificate changed
FrequenciesInstant, hourly, daily, weekly, monthly

Pick the Route by the Domains in Scope.

Domains you monitor

Deepinfo Platform · change notifications

WHOISasset_whois_changed

DNSasset_dns_changed

SSLasset_ssl_changed

Per event, instantly or as an hourly, daily, weekly or monthly digest

Any domain

Public API · the daily file

WHOISregistration record updated in the last day

DNSnot in the file

SSLnot in the file

The next day, as CSV or JSON

Changes Worth Hearing About Quickly.

Your domains

A Move Nobody Asked For

A registrar transfer or a name server change on one of your domains that no ticket explains.

Use case

Your suppliers

A Vendor Changes Hands

Ownership and infrastructure changes on the domains your third parties run.

Use case

Your cases

An Indicator Moves

A domain in an open investigation gets new name servers or a new registrant.

Use case

Questions About Real-Time Updated Domains

Is there a streaming or webhook endpoint for domain changes?

Not in the public API. Registration changes are delivered as a daily file through Daily Updated Domain Names. For other needs, talk to our data team.

Does the daily file include DNS changes?

The file is defined by registration updates. For DNS changes on the domains you monitor, use the platform’s asset_dns_changed event; for any name, DNS History shows what it resolved to before.

Do change notifications cover domains we do not monitor?

No. Change notifications cover the assets you monitor. For any other domain, the daily file lists the registration updates of the last day.

Can we watch our vendors’ domains like this?

Third-Party Risk Management scans each third party with the engine and layers that scan your surface. Talk to us about how notifications are set up for your portfolios.

What does “the last day” mean for the daily file?

It is counted back from the file_update_time the feed reports. Store that timestamp with each run so consecutive files line up.

How is the daily file priced?

Data feeds are priced on their own, by volume and frequency, separately from the platform. See Data & API pricing.

Know When Your Domains Move.

Book a demo of change notifications on your own domains, or talk to our data team about your pipeline.