Domain intelligence for security, fraud and brand teams, built from zone files, registration data services and daily DNS resolution.
What's included
- Daily newly registered and dropped domains for generic and many country-code TLDs
- Registration data: registrar, creation, update and expiry dates, status codes and, where published, registrant organisation and country
- WHOIS and RDAP history showing how registration data changed over time
- Daily A, AAAA, MX, NS and TXT records, with first-seen and last-seen dates
How buyers use it
- Spotting look-alike and phishing domains that imitate a brand
- Scoring sign-ups and transactions using domain age and mail configuration
- Mapping infrastructure shared by fraudulent sites through nameservers and IPs
- Enriching company records with web presence and mail provider
Coverage and methodology
Generic TLD coverage comes from zone files obtained through ICANN's Centralized Zone Data Service; country-code coverage comes from registries that publish data and from passive discovery. Registration data is fetched through RDAP and WHOIS within registry rate limits. Since GDPR, most registrant details for individuals are redacted at source; Vistula keeps them redacted and does not store names, email addresses or phone numbers of individual registrants. DNS records are resolved daily from Vistula's own resolvers in Warsaw and Frankfurt. History starts in 2016.