Monitor new domain and certificate activity with DomainKits and email alerts

Description

Quick overview
This workflow runs every 30 minutes to monitor a keyword across DomainKits newly registered domain data and Certificate Transparency activity, correlates both feeds, and emails only what changed since the last run with a text report and attached CSV.

How it works
Runs every 30 minutes on a schedule.
Sets the watch keyword and optional comma-separated domain suffixes to exclude from certificate results.
Searches DomainKits for newly registered domains matching the keyword and separately searches DomainKits Certificate Transparency logs for recent hostname activity.
Correlates both result sets, compares them to the previous run stored in workflow static data, and outputs only new registrations or domains with new/advanced certificate activity.
Performs a DomainKits bulk DNS lookup for up to 20 changed domains to fetch nameservers and listing status.
Builds a human-readable email report and a structured records list, then sends the report by SMTP with the records attached as a CSV file.

Setup
Create a DomainKits account and upgrade to Premium — the REST API requires a Premium plan or higher. Sign up at domainkits.com, then generate an API key and add it as a DomainKits API credential in n8n.
Configure the watch keyword (and any exclude suffixes) in the Set Watch step.
Add SMTP credentials and set the to/from email addresses in the email send step.
Run the workflow once on schedule to establish baseline state in workflow storage, then rely on subsequent runs to report changes only.

Requirements
DomainKits Premium API Key

Additional info
For more information:

API reference and key management: https://domainkits.com/dev
OpenAPI 3.0 spec: https://domainkits.com/dev/openapi.yaml