Every domain that changed yesterday, in one batch.
Every domain name with Whois or DNS changes in the previous 24 hours. Delivered as a daily batch with the diff signals that trigger downstream investigation.
One row per domain whose state moved.
The Daily Updated Domain Names Feed surfaces movement, not just existence. Every domain where the underlying Whois or DNS record changed in the past 24 hours, in a single file delivered each day.
Each record is the domain itself. Movement is detected against the previous day's snapshot across registrar, name servers, registrant block, expiry date, domain status codes, and the resolved DNS records most workflows care about. A registrar transfer, a name-server swap, an ownership change, an expiry-date jump, all trigger inclusion.
The feed is the upstream signal for any system that monitors domain churn at scale. Pair with the Whois Lookup or Whois History APIs to get the before-and-after state for any record in the file.
Daily batch, delivered as a download.
A single API call returns the metadata for the day's snapshot. Authenticate with an API token scoped to the feed.
Delivery
Bulk download. The API call returns metadata plus a signed download_url. HTTPS by default; S3 and SFTP available.
Format
JSON or CSV. The response payload reports the format, file size in bytes, line count, and last update timestamp.
Refresh cadence
Daily. Built once per day against the previous 24-hour change window.
Authentication
API token in the request header. Per-feed scoping; rotate from the dashboard. Reference at docs.deepinfo.com.
What you actually get.
The API response, with the metadata for the latest daily batch:
{
"download_url": "https://feeds.deepinfo.com/daily-updated-domains/2026-05-02/daily-updated-domains.json.gz?...",
"file_format": "json",
"file_size": 36918473,
"file_update_time": "2026-05-02T03:14:27Z",
"line_count": 1842731
}A few representative lines from the JSON-formatted file at download_url:
{"domain":"acme.com"}
{"domain":"contoso.io"}
{"domain":"deepinfo.com"}
{"domain":"example-corp.net"}
{"domain":"shop.example.shop"}Workflows this feed powers directly.
Incident Investigation and Response
Surface registrar transfers and name-server changes against domains in scope. Pivot through Whois History to see the prior state.
Read the use caseThird-Party Risk Management
Track vendor-domain churn at portfolio scale. Ownership changes and transfer events both trigger here.
Read the use caseAttack Surface Management
Detect drift across your own monitored apex domains. Catch sub-organization and shadow-IT registrations changing hands.
Read the use case“Domain-change signal at scale is what drives our investigation prioritization. Daily diffs across ownership and DNS replaced a manual delta-tracking process that never kept up with the volume.”
Other daily feeds.
Every domain dropped yesterday, in one batch.
Every domain name deleted, expired, or dropped from registration in the previous 24 hours.
See feed DATA FEEDEvery subdomain first seen yesterday, in one batch.
Every subdomain identified for the first time in the previous 24 hours.
See feed DATA FEEDEvery domain registered yesterday, in one batch.
Every domain name registered in the previous 24 hours across all monitored TLDs.
See feedTrack domain churn at internet scale.
We'll set up token access and answer schema questions on a call so your team can validate fit before integrating.