Threat Intelligence via Newly Registered Domains

 

Newly Registered Domains (NRDs) are an important asset for cyber threat investigators and malware analysts. Monitoring the files hosted on these web servers can reveal malicious activity.

In our previous articles, we discussed some methods to find NRDs. In this article, I introduce another excellent platform that provides daily updates of newly registered domains: WhoisDS.

With WhoisDS, you can download a list of newly registered domains on the same day they are registered. For example, if today is July 31, you can download the list of domains registered on July 31.

It may seem like there's a complex mechanism working behind the scenes and you're right but for now, it's not crucial for us to understand exactly how these platforms collect new domain registration data.

You can visit WhoisDS via the following link to download the latest NRDs (newly registered domain lists): https://www.whoisds.com/newly-registered-domains.

It's important to note that while these platforms offer paid options, the free provider feeds are sufficient for now.

You can simply click the download button to get the list of newly registered domains for today.

Note: Please be aware that the downloaded file is a ZIP archive. You will need to extract it using tools like 7-Zip or WinRAR.