Newly Registered Domains | WhoisXML API
Products APIs Data Feeds Web Tools Domain Research & Monitoring Enterprise Packages
WHOIS / WHOIS History
WHOIS / WHOIS History

Provide current and historical ownership information on domains / IPs. Identify all connections between domains, registrants, registrars, and DNS servers.

DNS / DNS History
DNS / DNS History

Look into all current and historical DNS / IP connections between domains and A, MX, NS, and other records. Monitor suspicious changes to DNS records.

IP Geolocation / IP Netblocks
IP Geolocation / IP Netblocks

Get detailed context on an IP address, including its user’s geolocation, time zone, connected domains, connection type, IP range, ASN, and other network ownership details.

Domain Research Suite (DRS)
Domain Research Suite (DRS)

Access our web-based solution to dig into and monitor all domain events of interest.

Domain Research Suite (DRS)
Domain Research Suite (DRS)

Get access to a web-based enterprise-grade solution to search and monitor domain registrations and ownership details for branded terms, fuzzy matches, registrants of interest, and more.

Research
Monitoring
White-Label
WhoisXML API Predictive Threat Intelligence
Predictive Threat Intelligence

Detect and block access to and from dangerous domain names before malicious actors can weaponize them. Contact us today for more information.

WhoisXML API Internet Infrastructure
Internet Infrastructure

Unlock integrated intelligence on Internet properties and their ownership, infrastructure, and other attributes.

Enterprise API Packages
Enterprise API Packages

Our complete set of domain, IP, and DNS intelligence available via API calls as an annual subscription with predictable pricing.

Security Intelligence (SI) Suite
Security Intelligence (SI) Suite

Offers complete access to WHOIS, IP, DNS, and subdomain data for product enrichment, threat hunting and more.

Multi-Level API User Administration Now Available - Manage individual API keys for team members in your organization.

Learn More
×
Contact Us
Specifications Pricing Blog

Newly Registered Domains: Find hidden business opportunities and potential threats

Get an edge over adversaries with daily access to around 250,000 freshly registered domains and 340,000 recently expired domains, along with their WHOIS data. We also keep daily statistics on domain updates.

Request a Quote Download database samples
A truly exhaustive and precise IP geolocation database updated daily
250,000+Newly registered domains monitored daily
340,000+Recently expired domains daily
60%+Cyber 150 in key categories trust us
52,000+Satisfied customers

Benefits of Our Newly Registered & Just Expired Domains Data Feeds

  • Up-to-date

    The data feeds are updated daily, giving users access to about 250,000 newly added domains and 340,000 recently expired domains every day. We also monitor updated and discovered domains.

  • Easy to integrate

    The data feeds are well-parsed and normalized to a consistent format for easy integration with your solutions.

  • WHOIS-enriched and contextualized

    Essential data points are available for newly registered domains and other event types, such as the registrant’s name, organization, and email address; creation, expiration, and updated dates; domain availability and age; and registrar information.

  • Support for all major gTLDs, new gTLDs, and country TLDs

    Get lists for major gTLDs and new gTLDs. Major gTLDs include .com, .net, .org, .us, .biz, .mobi, .info, .pro, .coop, .asia, .name, .tel, .aero. New gTLDs include .top, .xyz, .loan, .wang, .club, .site, .online and thousands more. Click here to view the complete gTLD list. Click here to view the complete ccTLD list.

Newly Registered Domains Database comes in various forms

  • Lite

    The Lite data feed lists all newly registered domains sporting gTLDs. Their WHOIS records are not included.

    Download CSV sample

  • Basic

    The Basic data feed includes newly registered and dropped domains under gTLDs without their WHOIS records.

    Download CSV sample

  • Professional

    The Professional data feed contains newly registered and dropped domains under gTLDs, along with their WHOIS records.

    Download CSV sample

  • Enterprise

    The Enterprise data feed spans all newly registered, updated, and dropped domains sporting gTLDs and ccTLDs, including their WHOIS records.

    Download CSV sample

  • Ultimate

    The Ultimate data feed contains newly discovered domains and everything in the Enterprise data feed. Users also have the option to access the Ultimate: Domains only feed, which includes all domains from the Ultimate data feed without their WHOIS record details.

    Download CSV sample

  • Snowflake Community Access

    Access a Newly Registered Domains Feed (Community Edition) with intelligence for 30 days on Snowflake.

    Visit Snowflake Profile

Check out JSON samples here.

Practical Usage

  • Early threat detection

    Monitor domains containing suspicious keywords or naming patterns to proactively detect malicious activities.

  • Asset discovery

    Access updated new domain registration data to identify potential assets, such as websites, servers, or other digital infrastructure, including shadow IT.

  • Fraud and phishing detection

    Immediately identify and block cybersquatting or look-alike domains before fraudsters can activate them.

  • Brand protection

    Monitor newly created and dropped domains daily for brand impersonation or trademark infringement.

  • Threat intelligence enrichment

    Correlate new domain intelligence with existing security data sources and capabilities for broader visibility.

  • Intelligence source for registrars

    Analyze domain registration activities and obtain insights into emerging trends, market shifts, and industry growth areas.



Download product sheet

Frequently Asked Questions

What are newly registered domains?

Newly registered domains are those registered within the past seven days. They may be new to the DNS and do not have historical footprints or have become available for registration after their previous owners dropped them. WhoisXML API identifies most newly registered domains and other domain events within 24 hours.

What is the difference between newly added, updated, and discovered domains?

Newly added domains are registered within the last 24 hours, plus domains created within the last 7 days. Newly updated domains are those with changes in the existing domains’ WHOIS record within the last 24 hours, plus WHOIS record changes within the last 7 days. Newly discovered domains are previously unknown domains created more than seven days ago.

How can I obtain a list of new domains quickly?

The Domains Only data feed for Ultimate plan users lets you obtain new domain intelligence faster, though without WHOIS records. It includes all domains from the Ultimate data feed, along with those added to or deleted from a given day's zone files compared with the previous day.

Another way is through Real-Time Domain Registration Streaming, which streams 11 domains per second on average once registered, dropped, or updated.

Is there a way to see statistics of new registered domains and other domain events?

Yes. All Newly Registered Domains data feed files include a complementary statistics file that reports the number of domains per TLD for that day.

What risks can newly registered domains pose?

While new domains are often created for legitimate purposes, threat actors also use them for malicious campaigns, such as for hosting malware C&C servers or spamming. Domains resembling well-known entities and strings may also be used for phishing and other fraudulent activities.

How long is a domain considered newly registered?

Typically, a domain is considered newly registered within the first 30 days of its most recent registration. However, our Newly Registered Domains data feeds are designed to monitor and publish data daily, so they include domains registered within the last 24 hours or the past seven days.