Modules on one index
Evaluate
Internet Insights
Public views of the data behind the Deepinfo Platform: how many domains are being registered, and how many vulnerabilities are being disclosed and exploited. Each figure comes from a Deep Search & Insights endpoint your team can also call through the Deepinfo API.
Last refresh
all updatedDomain
Vulnerability
Last 1 day
The domain count includes the current day, still in progress.
New domain registrations, newly published CVEs and new entries in CISA’s Known Exploited Vulnerabilities catalog, over the last 1, 7 and 30 days.
SnapshotUpdated hourlyLast refresh Source: Domain Intelligence and Vulnerability APIs
| Measure | Last 1 day | Last 7 days | Last 30 days |
|---|---|---|---|
| Domains registeredNew registrations across all TLDs in the index. The 1-day window includes the current day, still in progress. | 152,036Last 1 day | 1,977,622Last 7 days | 10,911,417Last 30 days |
| CVEs publishedNew CVE records, scored or not yet scored. | 1,284Last 1 day | 3,899Last 7 days | 17,897Last 30 days |
| Added to CISA KEVCVEs that CISA lists as exploited in the wild. | 2Last 1 day | 8Last 7 days | 34Last 30 days |
Domain Insights reads the domain index, Vulnerability Insights the CVE database.
Domains · Domain Intelligence API
Registrations by window, thirty days of daily volume, and the TLDs and name keywords new domains use.
Daily domain registrations from 2026-09-30 to 2026-10-29. Complete days averaged 370,115; the lowest was 237,324 on 2026-10-25 and the highest 515,577 on 2026-10-16. The last day is partial.
Vulnerabilities · Vulnerability API
Disclosure velocity, CISA KEV additions, the spread of CVSS scores, severity by year, the weaknesses behind them and the newest CVEs.
CVEs per year from 2010 to 2026. 2025: 49,972. 2026 to date: 91,473.
01
Deepinfo keeps its own index: domains with their registration data, and CVE records enriched with CVSS, EPSS, CISA KEV and CWE.
02
Deep Search & Insights serves aggregates over that record: registration counts, TLD and keyword rankings, CVE statistics.
03
A scheduled job calls each endpoint hourly and stores the answer. If a call fails, the previous answer stays in place.
04
The page opens with the snapshot it was built with, then loads the latest hourly refresh and redraws any chart whose numbers changed.
The charts on the Insights pages read these Deep Search & Insights endpoints, all GET. With an API key, your team can call them directly; each row links to its reference.
| Registrations by window | / · Reference |
|---|---|
| 30-day timeline | / · Reference |
| Top TLDs | / · Reference |
| Top keywords | / · Reference |
| CVEs published and modified | / · Reference |
| CISA KEV additions | / · Reference |
| CVSS score distribution | / · Reference |
| Severity by year | / · Reference |
| CWE timeline | / · Reference |
| Latest CVEs | / · Reference |
These aggregates sit on the same index that powers each module of the Deepinfo Platform.
A scheduled job refreshes them every hour, and each page shows the time of the last refresh near the top. Without JavaScript you see the snapshot that shipped with the page, with its time shown in that spot too.
No. Each count is shown exactly as the API returns it. The newest day and the current year are partial, and the charts label them that way instead of estimating a full value.
They count what Deepinfo’s index sees across the internet, not your organization. The Deepinfo Platform applies the same index to your organization: External Attack Surface Management ranks the CVEs on your assets with CVSS, EPSS and CISA KEV, and Brand Risk Protection matches new domains against your brands.
Yes. Domain records come through the Deepinfo API and the data feeds, CVE records through Vulnerability Search, and the aggregates through Deep Search & Insights.
A published CVE was first published in the window. A modified CVE is a record that changed in the window, whenever it was first published. Vulnerability Search filters the two on published and last_.
New CVEs show how much is disclosed. A KEV addition records evidence that a CVE is exploited in the wild, with a required action and a due date, which makes it a strong signal for what to patch first.
Every number on these pages is one API call away. Talk to us about access, or book a walk-through of the Deepinfo Platform built on that index.