Every domain dropped yesterday, in one batch.
Every domain name deleted, expired, or dropped from registration in the previous 24 hours. Delivered as a daily batch from zone-file diffs and registrar drop signals.
One row per domain that left the registry.
The Daily Deleted Domain Names Feed surfaces the back edge of the registration system. Every domain that disappeared from registry data in the past 24 hours, whether through deletion, non-renewal, or registrar drop.
Each record is the domain itself. The feed compares yesterday's zone-file state against today's across all monitored TLDs, captures everything that left, and delivers the union as a single file. ICANN CZDS, registry partner feeds, and Deepinfo's own continuous discovery pipeline all contribute.
Deleted domains matter for two workflows: drop-catching infrastructure that wants to know when a name becomes available, and threat investigation against domains that an adversary may have intentionally let lapse to break ownership trails.
Daily batch, delivered as a download.
A single API call returns the metadata for the day's snapshot. Authenticate with an API token scoped to the feed.
Delivery
Bulk download. The API call returns metadata plus a signed download_url. HTTPS by default; S3 and SFTP available.
Format
JSON or CSV. Set file_format on the request.
Refresh cadence
Daily. Built once per day against the previous 24-hour deletion window.
Authentication
API token in the request header. Per-feed scoping. Reference at docs.deepinfo.com.
What you actually get.
The API response, with the metadata for the latest daily batch:
{
"download_url": "https://feeds.deepinfo.com/daily-deleted-domains/2026-05-02/daily-deleted-domains.json.gz?...",
"file_format": "json",
"file_size": 3724819,
"file_update_time": "2026-05-02T03:14:27Z",
"line_count": 187293
}A few representative lines from the JSON-formatted file at download_url:
{"domain":"abandoned-startup.com"}
{"domain":"old-campaign-site.net"}
{"domain":"expired-brand-xyz.io"}
{"domain":"shut-down-product.co"}
{"domain":"former-vendor-portal.shop"}Workflows this feed powers directly.
Incident Investigation and Response
Track domains that adversaries dropped after use. The deletion timing is itself a signal.
Read the use caseBrand Impersonation Protection
Catch fake-brand domains the moment they expire. Useful for cleaning up stale watchlists.
Read the use caseDomain Intelligence and Research
Build the full lifecycle view of any domain by joining registration, update, and deletion events.
Read the use case“Drop-catch and ownership-change signal feeds straight into our brand-monitoring pipeline. Catching deletions at end-of-day cadence means our customer alerts go out before drop-catch resellers re-register the names.”
Other daily feeds.
Every subdomain first seen yesterday, in one batch.
Every subdomain identified for the first time in the previous 24 hours.
See feed DATA FEEDEvery domain registered yesterday, in one batch.
Every domain name registered in the previous 24 hours across all monitored TLDs.
See feed DATA FEEDEvery domain that changed yesterday, in one batch.
Every domain name with Whois or DNS changes in the previous 24 hours.
See feedWatch the back edge of the registry, every day.
We'll set up token access and walk through integration patterns for drop-catching and threat-trail workflows.