Newly Registered Domains | WhoisXML API

Newly Registered Domains: Find hidden business opportunities and potential threats

Get an edge over adversaries with daily access to around 250,000 freshly registered domains and 340,000 recently expired domains, along with their WHOIS data. We also keep daily statistics on domain updates.

A truly exhaustive and precise IP geolocation database updated daily
250,000+Newly registered domains monitored daily
340,000+Recently expired domains daily
60%+Cyber 150 in key categories trust us
52,000+Satisfied customers

Benefits of Our Newly Registered & Just Expired Domains Data Feeds

  • Up-to-date

    The data feeds are updated daily, giving users access to about 250,000 newly added domains and 340,000 recently expired domains every day. We also monitor updated and discovered domains.

  • Easy to integrate

    The data feeds are well-parsed and normalized to a consistent format for easy integration with your solutions.

  • WHOIS-enriched and contextualized

    Essential data points are available for newly registered domains and other event types, such as the registrant’s name, organization, and email address; creation, expiration, and updated dates; domain availability and age; and registrar information.

  • Support for all major gTLDs, new gTLDs, and country TLDs

    Get lists for major gTLDs and new gTLDs. Major gTLDs include .com, .net, .org, .us, .biz, .mobi, .info, .pro, .coop, .asia, .name, .tel, .aero. New gTLDs include .top, .xyz, .loan, .wang, .club, .site, .online and thousands more. Click here to view the complete gTLD list. Click here to view the complete ccTLD list.

Newly Registered Domains Database comes in various forms

  • Lite

    The Lite data feed lists all newly registered domains sporting gTLDs. Their WHOIS records are not included.

    Download CSV sample
  • Basic

    The Basic data feed includes newly registered and dropped domains under gTLDs without their WHOIS records.

    Download CSV sample
  • Professional

    The Professional data feed contains newly registered and dropped domains under gTLDs, along with their WHOIS records.

    Download CSV sample
  • Enterprise

    The Enterprise data feed spans all newly registered, updated, and dropped domains sporting gTLDs and ccTLDs, including their WHOIS records.

    Download CSV sample
  • Ultimate

    The Ultimate data feed contains newly discovered domains and everything in the Enterprise data feed. Users also have the option to access the Ultimate: Domains only feed, which includes all domains from the Ultimate data feed without their WHOIS record details.

    Download CSV sample
  • Snowflake Community Access

    Access a Newly Registered Domains Feed (Community Edition) with intelligence for 30 days on Snowflake.

    Visit Snowflake Profile

Check out JSON samples here.

Practical Usage

  • Early threat detection

    Monitor domains containing suspicious keywords or naming patterns to proactively detect malicious activities.

  • Asset discovery

    Access updated new domain registration data to identify potential assets, such as websites, servers, or other digital infrastructure, including shadow IT.

  • Fraud and phishing detection

    Immediately identify and block cybersquatting or look-alike domains before fraudsters can activate them.

  • Brand protection

    Monitor newly created and dropped domains daily for brand impersonation or trademark infringement.

  • Threat intelligence enrichment

    Correlate new domain intelligence with existing security data sources and capabilities for broader visibility.

  • Intelligence source for registrars

    Analyze domain registration activities and obtain insights into emerging trends, market shifts, and industry growth areas.



Download product sheet

Frequently Asked Questions

What are newly registered domains?

Newly registered domains are those registered within the past seven days. They may be new to the DNS and do not have historical footprints or have become available for registration after their previous owners dropped them. WhoisXML API identifies most newly registered domains and other domain events within 24 hours.

What is the difference between newly added, updated, and discovered domains?

Newly added domains are registered within the last 24 hours, plus domains created within the last 7 days. Newly updated domains are those with changes in the existing domains’ WHOIS record within the last 24 hours, plus WHOIS record changes within the last 7 days. Newly discovered domains are previously unknown domains created more than seven days ago.

How can I obtain a list of new domains quickly?

The Domains Only data feed for Ultimate plan users lets you obtain new domain intelligence faster, though without WHOIS records. It includes all domains from the Ultimate data feed, along with those added to or deleted from a given day's zone files compared with the previous day.

Another way is through Real-Time Domain Registration Streaming, which streams 11 domains per second on average once registered, dropped, or updated.

Is there a way to see statistics of new registered domains and other domain events?

Yes. All Newly Registered Domains data feed files include a complementary statistics file that reports the number of domains per TLD for that day.

What risks can newly registered domains pose?

While new domains are often created for legitimate purposes, threat actors also use them for malicious campaigns, such as for hosting malware C&C servers or spamming. Domains resembling well-known entities and strings may also be used for phishing and other fraudulent activities.

How long is a domain considered newly registered?

Typically, a domain is considered newly registered within the first 30 days of its most recent registration. However, our Newly Registered Domains data feeds are designed to monitor and publish data daily, so they include domains registered within the last 24 hours or the past seven days.