# Internet Insights URL: https://www.deepinfo.com/insights/ ## We Count the Internet Every Hour. Public views of the data behind the Deepinfo Platform: how many domains are being registered, and how many vulnerabilities are being disclosed and exploited. Each figure comes from a Deep Search & Insights endpoint your team can also call through the Deepinfo API. [Domain Insights](https://www.deepinfo.com/insights/domain/) · [Vulnerability Insights](https://www.deepinfo.com/insights/vulnerability/) ### The Counts That Change Daily. New domain registrations, newly published CVEs and new entries in CISA’s Known Exploited Vulnerabilities catalog, over the last 1, 7 and 30 days. Snapshot · Last refresh 2026-10-29 20:01 UTC · Source: Domain Intelligence and Vulnerability APIs | Measure | Last 1 day | Last 7 days | Last 30 days | | --- | --- | --- | --- | | Domains registered · New registrations across all TLDs in the index. The 1-day window includes the current day, still in progress. | 152,036 | 1,977,622 | 10,911,417 | | CVEs published · New CVE records, scored or not yet scored. | 1,284 | 3,899 | 17,897 | | Added to CISA KEV · CVEs that CISA lists as exploited in the wild. | 2 | 8 | 34 | ### Pick a Corpus and Read It in Depth. Domain Insights reads the domain index, Vulnerability Insights the CVE database. Domains · Domain Intelligence API #### [Domain Insights](https://www.deepinfo.com/insights/domain/) Registrations by window, thirty days of daily volume, and the TLDs and name keywords new domains use. Daily domain registrations from 2026-09-30 to 2026-10-29. Complete days averaged 370,115; the lowest was 237,324 on 2026-10-25 and the highest 515,577 on 2026-10-16. The last day is partial. - **Registered, all time**: 424,997,212 - **Registered, last 30 days**: 10,911,417 [Open Domain Insights](https://www.deepinfo.com/insights/domain/) Vulnerabilities · Vulnerability API #### [Vulnerability Insights](https://www.deepinfo.com/insights/vulnerability/) Disclosure velocity, CISA KEV additions, the spread of CVSS scores, severity by year, the weaknesses behind them and the newest CVEs. CVEs per year from 2010 to 2026. 2025: 49,972. 2026 to date: 91,473. - **CVEs on record**: 416,750 - **Added to CISA KEV, last 30 days**: 34 [Open Vulnerability Insights](https://www.deepinfo.com/insights/vulnerability/) ### From the Index to This Page. 1. **Index** Deepinfo keeps its own index: domains with their registration data, and CVE records enriched with CVSS, EPSS, CISA KEV and CWE. 2. **API** Deep Search & Insights serves aggregates over that record: registration counts, TLD and keyword rankings, CVE statistics. 3. **Hourly refresh** A scheduled job calls each endpoint hourly and stores the answer. If a call fails, the previous answer stays in place. 4. **This page** The page opens with the snapshot it was built with, then loads the latest hourly refresh and redraws any chart whose numbers changed. ### Each Chart Maps to One Endpoint. The charts on the Insights pages read these Deep Search & Insights endpoints, all `GET`. With an API key, your team can call them directly; each row links to its reference. - **Registrations by window**: `/explorer/domain-intelligence/registration-stats` · [Reference](https://docs.deepinfo.com/reference/domain-intelligence/registration-stats/) - **30-day timeline**: `/explorer/domain-intelligence/registration-timeline` · [Reference](https://docs.deepinfo.com/reference/domain-intelligence/registration-timeline/) - **Top TLDs**: `/explorer/domain-intelligence/tld-stats` · [Reference](https://docs.deepinfo.com/reference/domain-intelligence/tld-stats/) - **Top keywords**: `/explorer/domain-intelligence/keyword-stats` · [Reference](https://docs.deepinfo.com/reference/domain-intelligence/keyword-stats/) - **CVEs published and modified**: `/explore/vulnerability-insight/cve-stats` · [Reference](https://docs.deepinfo.com/reference/vulnerability/cve-stats/) - **CISA KEV additions**: `/explore/vulnerability-insight/cisa-kev-stats` · [Reference](https://docs.deepinfo.com/reference/vulnerability/cisa-kev-stats/) - **CVSS score distribution**: `/explore/vulnerability-insight/vulnerability-stats-by-cvss-scores` · [Reference](https://docs.deepinfo.com/reference/vulnerability/cvss-score-stats/) - **Severity by year**: `/explore/vulnerability-insight/vulnerability-severity-stats-by-year` · [Reference](https://docs.deepinfo.com/reference/vulnerability/severity-by-year-stats/) - **CWE timeline**: `/explore/vulnerability-insight/cwe-timeline` · [Reference](https://docs.deepinfo.com/reference/vulnerability/cwe-timeline/) - **Latest CVEs**: `/explore/vulnerability-insight/latest-added-vulnerabilities-list` · [Reference](https://docs.deepinfo.com/reference/vulnerability/latest-added/) ### Under the Counts Sits the Full Index. These aggregates sit on the same index that powers each module of the Deepinfo Platform. - 400M+ domains: across every TLD - 2B+ subdomains: discovered and resolved - 200B+ DNS records: cumulative, with history - 30B+ SSL certificates: indexed ### From the Counts to the Records. - [Domain Intelligence](https://www.deepinfo.com/platform/dsi/domain-intelligence/) (DSI): The registration endpoints behind Domain Insights, with parameters and samples. - [Vulnerability Intelligence](https://www.deepinfo.com/platform/dsi/vulnerability-intelligence/) (DSI): The CVE trend endpoints behind Vulnerability Insights, plus EPSS history per CVE. - [API services](https://www.deepinfo.com/data-api/apis/) (Data & API): Lookups, search, pivots and history over the whole index. ### Questions About Internet Insights **How fresh are these numbers?** A scheduled job refreshes them every hour, and each page shows the time of the last refresh near the top. Without JavaScript you see the snapshot that shipped with the page, with its time shown in that spot too. **Are the counts adjusted or projected?** No. Each count is shown exactly as the API returns it. The newest day and the current year are partial, and the charts label them that way instead of estimating a full value. **How do these counts relate to our own exposure?** They count what Deepinfo’s index sees across the internet, not your organization. The Deepinfo Platform applies the same index to your organization: [External Attack Surface Management](https://www.deepinfo.com/platform/easm/) ranks the CVEs on your assets with CVSS, EPSS and CISA KEV, and [Brand Risk Protection](https://www.deepinfo.com/platform/brp/) matches new domains against your brands. **Can we get the records behind the counts?** Yes. Domain records come through the [Deepinfo API](https://www.deepinfo.com/data-api/apis/) and the [data feeds](https://www.deepinfo.com/data-api/feeds/), CVE records through [Vulnerability Search](https://www.deepinfo.com/data-api/apis/vulnerability-search/), and the aggregates through [Deep Search & Insights](https://www.deepinfo.com/platform/dsi/). **What is the difference between a published and a modified CVE?** A published CVE was first published in the window. A modified CVE is a record that changed in the window, whenever it was first published. [Vulnerability Search](https://www.deepinfo.com/data-api/apis/vulnerability-search/) filters the two on `published` and `last_modified`. **Why count CISA KEV additions next to new CVEs?** New CVEs show how much is disclosed. A KEV addition records evidence that a CVE is exploited in the wild, with a required action and a due date, which makes it a strong signal for what to patch first. ### Query This Data From Your Code. Every number on these pages is one API call away. Talk to us about access, or book a walk-through of the Deepinfo Platform built on that index. [Talk to us about API access](https://www.deepinfo.com/contact/) [Request demo](https://www.deepinfo.com/request-demo/)