---
title: How do I use NRD2 newly registered domain lists with opensquat?
description: How do I use NRD2 newly registered domain lists with opensquat?
---

[Skip to content](https://knowledge.whoisxmlapi.com/how-do-i-use-nrd2-newly-registered-domain-lists-with-opensquat#main-content)

English

Show submenu for translations

![Logo inline notagline (1)-1.png\]](https://knowledge.whoisxmlapi.com/hs-fs/hubfs/Logo%20inline%20notagline%20(1)-1.png?height=40&name=Logo%20inline%20notagline%20(1)-1.png)

Open main navigation

Close main navigation

- English
  
  Show submenu for translations
- Go to whoisxmlapi.com

 Go to whoisxmlapi.com

 What do you want to know?

- There are no suggestions because the search field is empty.

1. [Knowledge Base](https://knowledge.whoisxmlapi.com/?hsLang=en)
2. [NRD2](https://knowledge.whoisxmlapi.com/nrd2?hsLang=en)
3. [Tutorials](https://knowledge.whoisxmlapi.com/nrd2?hsLang=en#tutorials)

# How do I use NRD2 newly registered domain lists with opensquat?

## Improved results from opensquat, against typosquatting and related types of cyber threats, such as domain squatting, phishing campaigns, IDN homoglyph attacks

[Opensquat](https://opensquat.com) is an open-source OSINT tool to find and analyze typosquatting domains efficiently. It can use custom lists of newly registered domains as the input for the search, hence, it is possible to use it with the lists of NRD2 data feeds to obtain more complete results.

To create a list suitable as an input to opensquat, a possibility is to use the [csvkit](https://csvkit.readthedocs.io/en/latest/) package which is, like opensquat itself, written in Python and thus available on many platforms. In BASH, a typical approach would be

```
 zcat nrd.2022-07-31.ultimate.daily.data.csv.gz | csvgrep -c reason -m added \    | csvcut -c domainName \    | tail --lines +2 > domain_names_nrd2_20220731.txt
```

where nrd.2022-07-31.ultimate.daily.data.csv.gz is the file downloaded from the[NRD2 data feed](https://newly-registered-domains.whoisxmlapi.com/). Ultimate is the most complete list, but the recipe works with the files from other subscription types, too. The file domain\_names\_nrd2\_20220731.txt will include the list of newly registered domains for the given day, suitable to use it with opensquat like this:

```
./opensquat.py -d domain_names_nrd2_20220731.txt 
```

which will find typosquatting domains for the file in keywords.txt and leave the result in result.txt. Consult the documentation of opensquat for further options, and [this](https://main.whoisxmlapi.com/blog/orchestrating-open-source-software-and-whois-newly-registered-domain-data-feeds-to-fight-the-typosquatting-plague) blog for a more detailed explanation with examples.

- [NRD2](https://knowledge.whoisxmlapi.com/nrd2?hsLang=en#main-content)
  
  
  
  
  
    - [Tutorials](https://knowledge.whoisxmlapi.com/nrd2?hsLang=en#tutorials)
- [General Support](https://knowledge.whoisxmlapi.com/general-support?hsLang=en)
- [WHOIS Domain Data](https://knowledge.whoisxmlapi.com/whois-domain-data?hsLang=en#main-content)
  
  
  
  
  
    - [WHOIS vs. Historical WHOIS](https://knowledge.whoisxmlapi.com/whois-domain-data?hsLang=en#whois-vs-historical-whois)
    - [Quarterly feeds](https://knowledge.whoisxmlapi.com/whois-domain-data?hsLang=en#quarterly-feeds)
    - [WHOIS data fields](https://knowledge.whoisxmlapi.com/whois-domain-data?hsLang=en#whois-data-fields)
    - [Bulk WHOIS Lookup](https://knowledge.whoisxmlapi.com/whois-domain-data?hsLang=en#bulk-whois-lookup)
- [DNS Data](https://knowledge.whoisxmlapi.com/dns-data?hsLang=en)
- [APIs](https://knowledge.whoisxmlapi.com/apis?hsLang=en#main-content)
  
  
  
  
  
    - [WHOIS API](https://knowledge.whoisxmlapi.com/apis?hsLang=en#whois-api)
    - [WHOIS History API](https://knowledge.whoisxmlapi.com/apis?hsLang=en#whois-history-api)
    - [DNS Lookup API](https://knowledge.whoisxmlapi.com/apis?hsLang=en#dns-lookup-api)
    - [IP Geolocation API](https://knowledge.whoisxmlapi.com/apis?hsLang=en#ip-geolocation-api)
    - [Email Verification API](https://knowledge.whoisxmlapi.com/apis?hsLang=en#email-verification-api)
    - [Domain Reputation API](https://knowledge.whoisxmlapi.com/apis?hsLang=en#domain-reputation-api)
    - [Subdomain Lookup API](https://knowledge.whoisxmlapi.com/apis?hsLang=en#subdomain-lookup-api)
    - [Reverse WHOIS API](https://knowledge.whoisxmlapi.com/apis?hsLang=en#reverse-whois-api)
- [Databases / Data Feeds](https://knowledge.whoisxmlapi.com/databases-data-feeds?hsLang=en#main-content)
  
  
  
  
  
    - [Threat Intelligence Data Feeds (TIDF)](https://knowledge.whoisxmlapi.com/databases-data-feeds?hsLang=en#threat-intelligence-data-feeds-tidf)
    - [IP Geolocation / IP Netblocks Databases](https://knowledge.whoisxmlapi.com/databases-data-feeds?hsLang=en#ip-geolocation-ip-netblocks-databases)
- [Legacy](https://knowledge.whoisxmlapi.com/legacy?hsLang=en)
- [Dev & Data Science Corner](https://knowledge.whoisxmlapi.com/dev-data-science-corner?hsLang=en#main-content)
  
  
  
  
  
    - [Dev resources](https://knowledge.whoisxmlapi.com/dev-data-science-corner?hsLang=en#dev-resources)
- [Domain Research Suite (DRS)](https://knowledge.whoisxmlapi.com/domain-research-suite-drs-1?hsLang=en)
- [IP Data](https://knowledge.whoisxmlapi.com/ip-data?hsLang=en)

[![Chill listening crop-3](https://knowledge.whoisxmlapi.com/hs-fs/hubfs/Logo%20eye%20icon%20(1).png?width=37&height=24&name=Logo%20eye%20icon%20(1).png "Chill listening crop-3")](http://whoisxmlapi.com)

Copyright © 2026, whoisxmlapi.com