Turn Threat Data Into Threat Intelligence
Connect indicators from your network with nearly every active domain and IP address on the Internet. Learn how this data can inform risk assessments, help profile attackers, guide online fraud investigations, and map cyber activity to attacker infrastructure.
Request A Demo
Upcoming Webinar
How to Identify Threats Faster and Increase Productivity
Learn how to reduce operational risk, improve capabilities for identifying and responding to potential threats, and empower your team to work with greater efficiency and productivity.
Register Now Webinar
Proven Methods for Threat Hunting
Learn how to leverage the capabilities of our rich Iris and PhishEye data sets with Splunk to provide better visibility and context into your network traffic, gain event enrichment-at-scale, and more.
Watch Now
Free Download
COVID-19 Threat List
DomainTools is providing a free, curated list of high-risk COVID-19-related domains to support the community during the Coronavirus crisis.
Access The List
Survey Report
SANS 2020 Cyber Threat Intelligence Survey
Identify the value of cyber threat intelligence (CTI), best practices for defining CTI requirements, and how organizations leverage CTI.
Download NowEmpower Your Team With The World's Largest DNS Dataset
Gain insight that is necessary to make the right decision about the risk level of threats to your organization.
Iris Investigation Platform
Detect. Investigate. Prevent.
DomainTools Iris is a proprietary threat intelligence and investigation platform that combines enterprise-grade domain and DNS-based intelligence with an intuitive web interface.
Who uses Iris:
- Security analysts and Incident Response teams
- Corporate security teams needing domain-based risk assessment
- Hunt Teams and Cyber Forensic Investigators
- Online Fraud and Brand Fraud Investigators
"Iris Investigation Platform combines enterprise-grade domain intelligence and risk scoring with passive DNS."
Enterprise Security Solutions
Confidence in the Data
DomainTools is the world leader in Domain and DNS Intelligence
Accurate
>95% of currently registered domains
Timely
All newly registered and discovered domains
Comprehensive
Nearly 2 decades of historical Whois and pDNS data
Featured Integrations
Related Resources
Learn more about industry topics and best practices.
The Anatomy of an Exploit: SMBGhost
In this webinar we will dive into the details of SMBGhost and show how to predict an attacker's next move.
The Anatomy of an Exploit: SMBGhost
Watch Now53. WAF Out Loud
Golang Into Overdrive, The Devil Is In The DDoS, and Two Truths and a Lie.
53. WAF Out Loud
Listen NowThe Value of Threat Intelligence with DomainTools: Identify Threats 82% Faster
Download this white paper to learn how DomainTools Threat Intelligence solution can help empower your security
The Value of Threat Intelligence with DomainTools: Identify Threats 82% Faster
Download Now52. A Picture Is Worth A Thousand Bytes
Researchers Play An Old-Fashioned Game of Whack-An-InvisiMole, Banking Trojan Walking On Thin IcedID, and Two
52. A Picture Is Worth A Thousand Bytes
Listen NowDomainTools App for Splunk and Splunk Enterprise Security
Learn how the Iris dataset can help you alert and hunt for young and newly observed domains, high risk domains, adversary infrastructure details, domains tagged via the Iris user interface, and targeted phishing domains.
DomainTools App for Splunk and Splunk Enterprise Security
Watch Now51. The Sith Cyber Robe
The TrickBot Thickens, Feds or Tails?, and Two Truths and a Lie.