T+0 · Registration
A domain is registered at any of the 2,500+ ICANN accredited registrars worldwide and enters the registry zone.
Newly registered domains (NRD)
The list of newly registered domains, with whois attached
A zone file tells you a domain exists. Our daily NRD feed tells you who registered it — verified name, email, phone, address, organisation and registrar — within 24 hours of registration.
Measured volume
How many new domains are registered each day
Counts below are the raw capture from our own collection pipeline over the last 10 days — not an industry estimate.
314,190
Captured on 16 Aug
422,341
10-day daily average
856,879
Peak day (07 Aug)
- 07 Aug856,879
- 08 Aug337,802
- 09 Aug216,944
- 10 Aug762,336
- 11 Aug643,737
- 12 Aug283,583
- 13 Aug314,359
- 14 Aug367,524
- 15 Aug126,058
- 16 Aug314,190
Collection pipeline
From registration to your FTP in under 24 hours
Every new domain passes the same four stages before it reaches your daily file.
T+2 to 12h · Zone capture
The new name appears in the daily zone diff. We queue it and start whois lookups against the authoritative registry and registrar servers.
T+18h · Parsing & dedupe
Raw whois text is parsed into 40+ normalised columns, duplicates are collapsed and malformed responses are re-queried.
T+24h · Privacy strip & delivery
Whois guard and proxy records are removed, files are split per TLD, zipped and pushed to your FTP account.
Anatomy of a record
What one newly registered domain row looks like
A single line from yesterday's drop, shown field by field. Every record follows this shape across all TLDs. Having pre-sorted, parsed columns (rather than unstructured raw text blocks) lets your developers directly import the CSV into database systems (MySQL/PostgreSQL), filter target records in Python, or link them into B2B sales automation sequences immediately.
| domainName | brightpathlabs.com |
|---|---|
| createdDate | 2026-07-25 |
| registrarName | NameCheap, Inc. |
| registrant_name | Daniel Okoye |
| registrant_organization | Brightpath Labs LLC |
| registrant_email | d.okoye@brightpathlabs.com |
| registrant_telephone | +1.4155550188 |
| registrant_city | San Mateo |
| registrant_country | US |
| nameServers | ns1.dnsowl.com | ns2.dnsowl.com |
Illustrative row · 40+ fields in total, including administrative contact detail.
Extension mix
Where the new registrations land
Typical share of a daily drop by extension. Each extension is delivered as its own file, plus one merged all-in-one file.
- .com63%
- .net7%
- .org6%
- .info4%
- .biz3%
- new gTLDs17%
Market Intelligence
Recent WHOIS registration trends & Startup surges
The global domain registration landscape is changing rapidly. Monitoring daily newly registered domains exposes immediate macro shifts in the tech sector, cybersecurity, and digital commerce.
The Startup Surge in .ai and .co
Artificial intelligence startups have triggered a massive wave of registrations in the .ai and .io ccTLDs, which are now treated as generic tech extensions. A daily NRD feed catches these startups the exact morning they register their domain, letting hosting, branding, and design agencies reach founders first.
Cybersecurity Campaign Burst Patterns
Threat actors register domain clusters in rapid succession (burst registrations) to scale phishing campaigns. By scanning daily lists, security pipelines can flag high-velocity registration attributes (like same-day DNS setups on a specific registrar) to pre-emptively block threat vectors.
Rise of Brand Impersonation in gTLDs
The delegation of hundreds of new generic TLDs (.secure, .wallet, .support) has expanded typosquatting opportunities. Monitoring daily feeds allows enterprise brand teams to intercept infringing domain names before they can be configured with MX records or loaded with malicious content.
Who uses newly registered domain database feeds?
Daily new domain registration lists are leveraged by three primary sectors: cybersecurity operations to intercept phishing setups, sales development reps to identify new businesses, and intellectual property brand teams to detect domain spoofing.
How often are newly registered domain lists compiled?
Our parsers check registry changes and root zone updates continuously. We compile, clean, deduplicate, and packages these registrations every 24 hours to deliver a single complete daily archive file.
Bulk Feeds vs. Live API lookups: What is the difference?
Depending on your application use case, choosing between a bulk daily download and a transactional query API dictates your parsing infrastructure.
| Metric / Dimension | Daily Bulk Downloads Feed | Real-Time Lookup API Keys |
|---|---|---|
| Best Suited For | Data analytics, local indexing, and mass email prospecting | Single on-demand checks during active app user sessions |
| Query Cost Efficiency | Flat monthly rate (lowest cost per domain record) | Metered pay-as-you-go credits per individual query |
| Data Capture Scope | Captures every single registration globally in 24 hours | Queries specific domain inputs on demand |
The other end of the lifecycle
Just-expired and dropped domains, in the same feed
Track both ends of the domain lifecycle without a second subscription.
Expiry monitoring
Domains reaching expiry each day, ready for drop-catch shortlists and renewal outreach.
Re-registration signal
See which dropped names are picked back up, and by which registrar, within days.
40+ days of history
Your FTP keeps more than 40 previous daily drops, so a missed day is never a lost day.
Need coverage further back? Browse the historic whois database by country.
NRD questions
Newly registered domains — frequently asked
What is a newly registered domain (NRD)?+
A newly registered domain is any domain name first registered within a recent window — typically the last 24 hours to 30 days. NRDs are widely used for lead generation and are also a strong signal in security filtering, because a large share of phishing and spam infrastructure is under 30 days old.
How fast do new domains reach my FTP account?+
Within about 24 hours of registration. Zone capture starts within hours, whois enrichment and parsing follow, and the finished files land on your FTP as a single daily drop.
How do security teams use newly registered domains (NRDs) for threat intelligence?+
Security operations centers (SOCs) and security filters use NRD lists to protect networks from malicious activity. Over 70% of domains used for phishing, malware distribution, and cyberattacks are under 30 days old. DNS filters block or flag traffic to newly registered domains to prevent incident vectors before the domains get classified by security crawlers.
How many new domains are registered per day?+
Volumes typically run between 180,000 and 240,000 per day across all TLDs, with weekday peaks and lower weekend registration. The last ten days of measured volume are shown on this page.
What fields are parsed in the daily NRD WHOIS data?+
Every daily domain file includes over 40 structured columns: domain name, registrar ID, registry WHOIS server, DNS nameservers, creation/modification/expiration dates, and full registrant, administrative, and billing contact details (names, verified emails, phone numbers, state, postal code, and country codes).
Do you include just-expired and dropped domains?+
Yes. Alongside daily new registrations we publish domains that have just reached expiry, which is useful for drop-catching, re-registration monitoring and portfolio research.
Are privacy-protected new domains included?+
No. Records behind a whois guard or privacy proxy carry no usable registrant detail, so they are removed before delivery and you are never charged for them.
Can I get only new domains from one country or one TLD?+
Yes. Files are already split per TLD in every plan, and the country-filtered subscription adds one file per registrant country each day.
Is there a trial available for the daily newly registered domains list?+
Yes, you can download a complete daily dataset sample from our samples page (which includes proxy-removed records, raw records, and country splits) to review the column headers, file formats, and data richness before subscribing.
Get today's newly registered domains
Subscribe and your FTP credentials arrive instantly. Every daily drop, every TLD, whois attached and privacy records removed.
Keep exploring
Explore the whois database
Everything you need to evaluate, buy and use our daily whois data.