A domain is considered newly active when its activity (queries originating from different IPs) transitions from dormant or nearly dormant to active or very active.

This data feed is currently experimental and access is granted on a case-by-case basis.

​
Format

JSON
{
  "timestamp": "2022-02-14T18:25:43.511Z",
  "domain": "boredapeyachtclub.me"
}

​
Pricing

€1,999/month — talk to us at contact@dns0.eu to set up the subscription and get your API key.

Threat intelligence partners get free or discounted access to this data feed.

​
Authentication

Authenticate by passing your API key as Bearer token in the Authorization header.

The WebSocket streaming endpoint is available without authentication for testing purposes (up to 10 minutes per day).

​
Stream

WebSocket

​
Download

Newline-delimited JSON dumps of the previous day’s stream are made available daily at the following URL.

https://data.dns0.eu/nad

The file is updated every day between midnight and 1am UTC. Use conditional requests (If-Modified-Since) or make use of HEAD requests to avoid unnecessary bandwidth usage.