I have a DNS client that feeds into my passive DNS database by reading CT logs and then trying to resolve them.