NOH focuses on the first time a hostname is observed in the DNS and can help uncover malicious activity at the subdomain level.
The current rate is around 8,000,000 newly observed hostnames per day.
€999/month — talk to us at contact@dns0.eu to set up the subscription and get your API key.
Threat intelligence partners get free or discounted access to this data feed.
Authenticate by passing your API key as Bearer
token in the Authorization
header.
The WebSocket streaming endpoint is available without authentication for testing purposes (up to 10 minutes per day).
WebSocket
The WebSocket endpoint is available at the following URL.
Google Cloud Pub/Sub
Upon request, you will be granted the pubsub.subscriber
role for the topic projects/dns0eu/topics/data.noh
.
Amazon SNS
Evaluating demand, please register your interest at contact@dns0.eu.
Azure Event Hubs
Evaluating demand, please register your interest at contact@dns0.eu.
Apache Kafka
Evaluating demand, please register your interest at contact@dns0.eu.
Newline-delimited JSON dumps of the previous day’s stream are made available daily at the following URL.
The file is updated every day between midnight and 1am UTC. Use conditional
requests (If-Modified-Since
) or make use of HEAD
requests to avoid
unnecessary bandwidth usage.
NOH focuses on the first time a hostname is observed in the DNS and can help uncover malicious activity at the subdomain level.
The current rate is around 8,000,000 newly observed hostnames per day.
€999/month — talk to us at contact@dns0.eu to set up the subscription and get your API key.
Threat intelligence partners get free or discounted access to this data feed.
Authenticate by passing your API key as Bearer
token in the Authorization
header.
The WebSocket streaming endpoint is available without authentication for testing purposes (up to 10 minutes per day).
WebSocket
The WebSocket endpoint is available at the following URL.
Google Cloud Pub/Sub
Upon request, you will be granted the pubsub.subscriber
role for the topic projects/dns0eu/topics/data.noh
.
Amazon SNS
Evaluating demand, please register your interest at contact@dns0.eu.
Azure Event Hubs
Evaluating demand, please register your interest at contact@dns0.eu.
Apache Kafka
Evaluating demand, please register your interest at contact@dns0.eu.
Newline-delimited JSON dumps of the previous day’s stream are made available daily at the following URL.
The file is updated every day between midnight and 1am UTC. Use conditional
requests (If-Modified-Since
) or make use of HEAD
requests to avoid
unnecessary bandwidth usage.