▸ newly detected domains

connecting…

# real-time stream from CT logs + zone files · received 0 since page load

showing latest 0 (cap 200)
live-feed.stream0/200
reconnecting to live feed…

▸ bulk CSV downloads

# all newly detected domains, batched as daily / weekly / monthly exports

▸ stream this feed yourself

# same data this page consumes, over a plain WebSocket - no auth required

ws-quickstart.md
endpoint
wss://dnsniffer.com/ws
optional filters (query string)
# only .com
wss://dnsniffer.com/ws?tld=com

# only domains containing "acme"
wss://dnsniffer.com/ws?q=acme
event shape
{ "type":"domain", "id":"...", "name":"foo.com", "tld":"com", "created_at":"..." }
browser example
const ws = new WebSocket('wss://dnsniffer.com/ws?tld=com');
ws.onmessage = e => {
  const m = JSON.parse(e.data);
  if (m.type === 'domain') console.log(m.name);
};

# heartbeat: server pings every 30s. server-side rate limit: 200 messages/sec per client. see /docs/api.