IP, Domain, and Company enrichment Feeds

Get a custom feed quote

SecurityTrails provides you with high-quality data feeds that are always up-to-date and available for use within your applications.

Fill out my online form.
Domain feeds

Features

Discover the main features from our intelligence data feeds

All the data you need

All The Data You Need

Get access to the most complete list of domain names, ready to be saved, analyzed and manipulated on your local PC.

All the data you need

Always Updated

Unlike other feeds, our intelligence feeds are updated every 24 hours, keeping all data fresh, current and ready for you.

All the data you need

Accurate Information

Don’t be misled by the wrong information—our feeds are constantly curated and always accurate, giving you the right data for your infosec needs.

All the data you need

Custom Downloads

Generate custom feed downloads by type, ccTLD/TLD and registration status, with the option to enrich CSV results with available nameservers.

All the data you need

Instant Visibility

Watch over suspicious activity by inspecting domain names to prevent possible suspicious campaigns including phishing, spam, malware and copyright violations.

All the data you need

Web-Based Console

Explore static feeds or download a dynamic feed from our intuitive console or by using our API endpoints.

Domain Feeds

Boost your security research and prevent attacks using our Domain Feeds

1,500+ Supported TLDs
257 country code top level domains
1299 generic top level domains!

1,500+ Supported TLDs

Filter, and fetch any domain feed

Filter, and fetch any domain feed
All domains
gTLDs only
ccTLDs only
Download by registration status
Choose the registration status you need:
All, newly registered, or newly registered and newly revived

Download by registration status

Set your custom date

Set your custom date
Choose the latest feed
Browse through historical dates
Data from multiple sources
Our own passive DNS servers
Custom deals with registrars
Parsed blacklists, and more!

Data from multiple sources

Currently available feeds for data enrichment

Domain Data

List of all Domains

List of all Domains

Get the latest list of all discovered ccTLD and gTLD domains.

Domain Data

List of Subdomains

List of Subdomains

You can download the frequently updated list of all subdomains. Subdomains are available for any domain in our database.

Domain & Company Data

Fortune 500 Data

Fortune 500 Data

Discover all the Fortune 500 associated domains and IP addresses.

Domain & Company Data

Certificate Transparency Logs

Certificate Transparency Logs

All certificate transparency logs are in unified format, ready for any extraction of information about publicly trusted certificate logs, such as public key information, common name and issuer.

Domain Data

DMARC scans

DMARC Scans

Get the list of DMARC records for all domains we have in our database.

IP & Port data

Custom Feeds

Custom Feeds

Get in touch with us and take cybersecurity data enrichment to the next level with feeds that are customized just for your app.

Schedule a call

What is our data used for?

Domain enrichment

IP and domain enrichment

Custom crawlers

Building custom crawlers

Offline investigations

Offline
investigations

Cybersecurity insurance underwriting

Cybersecurity insurance underwriting

Understanding web technology adoption

Understanding web technology adoption

Market share

Market share
reports

Detect phishing attacks

Detect phishing
attacks

Find spam domains

Find spam
domains

Stop malware campaigns

Stop malware campaigns

Discover copyright violations

Discover copyright violations

Zone Files and Transparency Logs

DomainLists is a TLD zone-file feed with over 1,287 gTLDs and ccTLDs available and daily updated. They are available as simple CSV downloads and APIs for integration into your application. We use a sophisticated process of parsing zone files for Generic Top Level Domains (gTLDs) and recreating country code Top Level Domains (ccTLDs). Many domain registries don’t distribute complete zone files so we process lots of data to recreate domains.

Daily updates

All our gTLDs and ccTlDS domain lists are updated daily.

All domains nameservers

Fetch all domains including their last seen nameservers from the API.

See newly registered domains

Figure out which generic TLDs have been registered today using our API.

Advanced domain grabbing

We use our own technology to find and validate domain names.

CSV download

You will be able to download a list of every individual Top-Level-Domain as a CSV file.

API access

Our API allows your to download all domain lists in an automated environment.

Get real-time updates of certificates being issued

We provide the certificate transparency logs by all issuers via our unified feeds interface. This allows you to develop your own applications to protect your brand, find malicious certificates, and get a general overview of certificates that are unknown to you. We include all important certificate information, such as issuer, common names (domain names), fingerprints, subjects, and expiration dates.

Issuers we Monitor

As certificate transparency logs become more widespread, we’re constantly adding new data sources. Currently we include Google, Cloudflare, Digicert, Certly, Izenpe, WoSign, Venafi, CNNIC, StartCom, and Comodo.

Real-Time


Real-time ingest from all known issuers. Ability to find new certificates that companies registered, new subdomains and new potential phishing vectors.

Historical


Over 1.35 Billion current and expired certificates you can search and mine. Find and understand which certs have been registered to a domain or organization.

Learn more about SecurityTrails Feeds

Got a specific project or just want to learn more about how SecurityTrails Feeds can enhance your service or product? Get in touch with us and take cybersecurity data enrichment to the next level with Feeds that are customized just for you.

Contact us