Domain Activity API
Daily feeds of newly observed and no-longer-observed gTLD domains. Commonly used as an added domains and deleted domains API, DNFeed provides public DNS and registry-related activity data for over 240 million monitored domains, with 10 to 12 million changes surfaced every 24 hours.
What the feed contains
DNFeed tracks gTLD domain activity by comparing public DNS and registry-related activity signals over time. CodePunch collects, normalizes, and processes these signals daily to produce structured feeds of domains that are newly observed or no longer observed in the activity data.
Commonly used as an added domains and deleted domains API, DNFeed helps teams monitor daily gTLD domain changes without operating their own collection pipeline.
The result is a broad view of domain activity across the gTLD namespace, updated once per day. New domains typically appear in the feed within 24 hours of being observed in the underlying activity data.
API endpoint
Features
Daily Added Domains
gTLD domains newly observed in the past 24 hours, derived from public DNS and registry-related activity signals. 10 to 12 million additions per day across supported gTLDs.
Daily Deleted Domains
Domains no longer observed in the daily gTLD activity data compared with the previous processing cycle. Comparable volume to additions, processed in the same daily update cycle.
Keyword Position Monitoring
Filter the daily feed by keyword, with position matching at start, end, middle, or anywhere in the domain name. Non-IDN domain names only.
Trademark and Malware Analysis
Built-in support for trademark monitoring and malware-related keyword tracking across the daily domain activity stream.
Coverage
| TLD Type | Coverage | Data Basis | Update Frequency |
|---|---|---|---|
| gTLDs (.com, .net, .org and all others) | Broad | Public DNS and registry-related activity signals | Daily |
| ccTLDs (.uk, .de, .au etc) | Not included | Limited public DNS activity visibility | N/A |
For ccTLD activity monitoring, see the SSL/TLS Certificate feed which tracks certificate issuance across all TLDs including ccTLDs.