Historical domain data and zone file archives

How to use historical data responsibly

1. Record the source URL, zone, file date, and download timestamp with every analysis.
2. Compare like with like: use the same zone and compatible file types when measuring change.
3. Interpret additions and removals as observations, not automatically as registration events.
4. Check current status and corroborate important findings with independent sources before acting.

Compare two historical domain snapshots with Python

Download two available snapshots of the same zone. Replace these example filenames with your actual gzip-compressed files; their dates are illustrative.

import gzip

def load_domains(path):
    with gzip.open(path, "rt", encoding="utf-8") as source:
        return {line.strip().lower().rstrip(".")
                for line in source if line.strip()}

before = load_domains("com.2026-08-01.txt.gz")
after = load_domains("com.2026-09-01.txt.gz")
added = after - before
removed = before - after
print(len(added), "observed additions")
print(len(removed), "observed removals")

This small example loads both snapshots into memory. For large datasets, use the disk-backed SQLite comparison with input checksums in the research use case. Differences between two dates do not reveal every change that happened between them.