Domain Activity API
Daily feeds of newly observed and no-longer-observed gTLD domains. Commonly used as an added domains and deleted domains API, DNFeed is for daily domain activity monitoring by trademark, company, brand, product, or suspicious terms. If you need the full searchable DNS/gTLD database, along with access to daily added and deleted domain activity, use the DNS API.
Daily activity feed, not full-space search
DNFeed tracks daily gTLD domain activity by comparing public DNS and registry-related activity signals over time. CodePunch collects, normalizes, and processes these signals once per day to produce structured feeds of domains that are newly observed or no longer observed in the activity data.
Use this API when you want daily added/deleted domain feeds or daily monitoring for trademark, company, brand, product, campaign, or suspicious terms. It is commonly used as an added domains and deleted domains API.
This page is for the daily Domain Activity API. If you need broader searchable gTLD domain data, nameserver-hosted domain lists, DNS record lookups, PTR, ASN, or observed subdomains, use the DNS API.
API endpoint
Features
Daily Added Domains
gTLD domains newly observed in the past 24 hours, derived from public DNS and registry-related activity signals. 10 to 12 million additions per day across supported gTLDs.
Daily Deleted Domains
Domains no longer observed in the daily gTLD activity data compared with the previous processing cycle. Comparable volume to additions, processed in the same daily update cycle.
Trademark and Brand Term Monitoring
Filter the daily feed by trademark, company, brand, product, campaign, or suspicious terms, with position matching at start, end, middle, or anywhere in the domain name. Non-IDN domain names only.
Trademark and Malware Analysis
Built-in support for trademark monitoring, brand protection, and malware-related term tracking across the daily domain activity stream.
Coverage
| TLD Type | Coverage | Data Basis | Update Frequency |
|---|---|---|---|
| gTLDs (.com, .net, .org and all others) | Broad | Public DNS and registry-related activity signals | Daily |
| ccTLDs (.uk, .de, .au etc) | Not included | Limited public DNS activity visibility | N/A |
For ccTLD activity monitoring, see the SSL/TLS Certificate feed which tracks certificate issuance across all TLDs including ccTLDs.