• Products
    • Products
    • Iris Intelligence Platform
      • The first place to go when you need to know.
      • Iris Investigate
        • Map connected infrastructure to get ahead of threats.
      • Iris Detect
        • Discover and monitor lookalike domains with unmatched speed and coverage.
      • Iris Enrich
        • Integrate DomainTools data with SIEM, SOAR, and other tools.
    • Farsight DNSDB
      • The world’s largest Passive DNS intelligence solution.
      • DNSDB API
        • Unlock the power of 13+ years of historical passive DNS data, updated in real time.
      • DNSDB Export
        • The “on-premise” version of DNSDB API resulting in the fastest response time, unlimited query volume, and total query privacy.
      • DNSDB Flexible Search
        • Regular expression search across every label of a fully qualified domain name and select RData.
    • Threat Intelligence Feeds
      • If it’s happening online, you’ll know.
      • Domain Visibility
        • Daily risk-scored domain list and targeted feeds.
      • Predictive Risk Score
        • Predictive risk scoring and infrastructure profiling.
  • Integrations
    • Integrations
      • SIEM
        • Enhance threat hunting and domain alerts in your preferred SIEM.
      • SOAR
        • Create event playbooks and take targeted action with our leading domain intelligence.
      • Threat Intelligence
        • Uncover actor infrastructure and profile threats in your preferred platform.
      • Getting Started
        • Transform threat data into intelligence with top security vendor partnerships.
  • Partners
    • Partners
      • Reseller Partner
        • VAR’s, Distributors, MSSP’s and System Integrators can grow revenue and improve margins.
      • OEM Partners
        • Cyber Product and Service companies can quickly advance and differentiate your solution.
      • Technology Partners
        • Cyber Technology Companies enhance and expand your capabilities.
  • Solutions
    • Solutions
    • By Use Case
      • Threat Intelligence
        • See the Internet. Identify risk.
      • Phishing and Fraud Prevention
        • Gain the early upper hand on emerging campaigns.
      • Threat Hunting
        • Make unknown threats known before they do damage.
      • Brand Protection
        • Defend your brand and reputation.
      • Forensics & Incident Response
        • Discover “who is” behind attacks and threats.
      • Application Enrichment
        • Build homegrown or third-party security applications with the world’s best Internet intelligence.
    • By Industry
      • Federal Government
        • Strengthening cybersecurity resilience across government systems.
      • Financial Services
        • Increasing the financial sector’s resilience against attacks.
      • Healthcare
        • Bolstering protection and defenses for PII and PHI.
      • Technology
        • Helping defenders of the high-tech attack surface.
      • Retail
        • Safeguarding against data breaches, consumer-based attacks, phishing, BEC, and other threats.
  • Company
    • Company
      • Leadership
        • Meet our exceptional executive team of experts and industry leaders.
      • Careers
        • Join our team to collaborate with exceptional people who are dedicated to protecting the Internet.
      • Pressroom
        • Access the latest DomainTools news and press coverage.
      • Contact
        • We’re here to help with product info, pricing, and current and future account services.
  • Resource Center
    • Resource Center
      • Knowledge Center
        • Blog
          • Explore our library of thought leadership articles and insights.
        • Webinars
          • Watch live and on-demand cybersecurity training from the DomainTools team.
        • Podcasts
          • Stream informative and exclusive episodes of DomainTools “Breaking Badness” podcast.
        • White Papers
          • Discover the real-world impact of DomainTools DNS intelligence.
    • Client Resources
      • User Guides
        • Navigate DomainTools features effortlessly with our comprehensive guides.
      • API Documentation
        • Access everything you need, including endpoint, response formats, sample queries, and product service levels.
      • Customer FAQs
        • Explore our in-depth Frequently Asked Questions by category to get the answers you need.
    • Featured
      DomainTools Reports
      DomainTools Investigations Inaugural Domain Intelligence Report
      Read More
  • -
  • Support and Learning
  • -
  • Request a Demo
  • Products
    • Products
    • Iris Intelligence Platform
      • The first place to go when you need to know.
      • Iris Investigate
        • Map connected infrastructure to get ahead of threats.
      • Iris Detect
        • Discover and monitor lookalike domains with unmatched speed and coverage.
      • Iris Enrich
        • Integrate DomainTools data with SIEM, SOAR, and other tools.
    • Farsight DNSDB
      • The world’s largest Passive DNS intelligence solution.
      • DNSDB API
        • Unlock the power of 13+ years of historical passive DNS data, updated in real time.
      • DNSDB Export
        • The “on-premise” version of DNSDB API resulting in the fastest response time, unlimited query volume, and total query privacy.
      • DNSDB Flexible Search
        • Regular expression search across every label of a fully qualified domain name and select RData.
    • Threat Intelligence Feeds
      • If it’s happening online, you’ll know.
      • Domain Visibility
        • Daily risk-scored domain list and targeted feeds.
      • Predictive Risk Score
        • Predictive risk scoring and infrastructure profiling.
  • Integrations
    • Integrations
      • SIEM
        • Enhance threat hunting and domain alerts in your preferred SIEM.
      • SOAR
        • Create event playbooks and take targeted action with our leading domain intelligence.
      • Threat Intelligence
        • Uncover actor infrastructure and profile threats in your preferred platform.
      • Getting Started
        • Transform threat data into intelligence with top security vendor partnerships.
  • Partners
    • Partners
      • Reseller Partner
        • VAR’s, Distributors, MSSP’s and System Integrators can grow revenue and improve margins.
      • OEM Partners
        • Cyber Product and Service companies can quickly advance and differentiate your solution.
      • Technology Partners
        • Cyber Technology Companies enhance and expand your capabilities.
  • Solutions
    • Solutions
    • By Use Case
      • Threat Intelligence
        • See the Internet. Identify risk.
      • Phishing and Fraud Prevention
        • Gain the early upper hand on emerging campaigns.
      • Threat Hunting
        • Make unknown threats known before they do damage.
      • Brand Protection
        • Defend your brand and reputation.
      • Forensics & Incident Response
        • Discover “who is” behind attacks and threats.
      • Application Enrichment
        • Build homegrown or third-party security applications with the world’s best Internet intelligence.
    • By Industry
      • Federal Government
        • Strengthening cybersecurity resilience across government systems.
      • Financial Services
        • Increasing the financial sector’s resilience against attacks.
      • Healthcare
        • Bolstering protection and defenses for PII and PHI.
      • Technology
        • Helping defenders of the high-tech attack surface.
      • Retail
        • Safeguarding against data breaches, consumer-based attacks, phishing, BEC, and other threats.
  • Company
    • Company
      • Leadership
        • Meet our exceptional executive team of experts and industry leaders.
      • Careers
        • Join our team to collaborate with exceptional people who are dedicated to protecting the Internet.
      • Pressroom
        • Access the latest DomainTools news and press coverage.
      • Contact
        • We’re here to help with product info, pricing, and current and future account services.
  • Resource Center
    • Resource Center
      • Knowledge Center
        • Blog
          • Explore our library of thought leadership articles and insights.
        • Webinars
          • Watch live and on-demand cybersecurity training from the DomainTools team.
        • Podcasts
          • Stream informative and exclusive episodes of DomainTools “Breaking Badness” podcast.
        • White Papers
          • Discover the real-world impact of DomainTools DNS intelligence.
    • Client Resources
      • User Guides
        • Navigate DomainTools features effortlessly with our comprehensive guides.
      • API Documentation
        • Access everything you need, including endpoint, response formats, sample queries, and product service levels.
      • Customer FAQs
        • Explore our in-depth Frequently Asked Questions by category to get the answers you need.
    • Featured
      DomainTools Reports
      DomainTools Investigations Inaugural Domain Intelligence Report
      Read More
  • -
  • Support and Learning
  • -
  • Request a Demo
DomainTools Favicon
Author

DomainToolsResearch

@SecuritySnacks

The DomainTools Research team seeks to help defenders protect their company/employees/users/customers, innovate the way security research is conducted, monitor and discover threats on the edge of attacker innovation, and enable infosecurity professionals to make more informed security decisions faster.

Posts By DomainToolsResearch

New Leader Named in Evil Corp
Blog

Hostile Takeover: A History of Evil Corp after a Leader is named by Law Enforcement

Read more
A digital illustration of a bright blue light source emitting waves and beams, surrounded by vertical lines of binary code against a dark blue background, creating a futuristic ambiance.
Blog

The Resurgence of the “Manipulaters” Team - Breaking HeartSenders

Read more
Abstract digital background with glowing blue lines and dots representing connectivity and data flow on a dark backdrop, ideal for highlighting the importance of being vigilant about US Postal Service phishing during the holidays.
Blog

Merry Phishmas: Beware US Postal Service Phishing During the Holidays

Read more
Blog

Return to Sender - A Brief Analysis of a US Postal Service Smishing Campaign

Read more
Blog

The Most Prolific Ransomware Families: 2023 Edition

Read more
Abstract network graphic with interconnected nodes and lines on a dark background, featuring glowing pink and blue dots and links suggesting digital connectivity in the context of financial advisor impersonation.
Blog

Update: Financial Advisor Impersonation Ring Targets FINRA

Read more
Planet with green codes
Blog

No Blocking, No Issue: The Curious Ecosystem of Financial Advisor Impersonation Scams

Read more
malicious detections background
Blog

Purpose Built Criminal Proxy Services and the Malicious Activity They Enable

Read more
Crypto winter fraudsters impersonate ukraines government to steal nfts and cryptocurrency
Blog

Crypto Winter: Fraudsters Impersonate Ukraine’s Government to Steal NFTs and Cryptocurrency

Read more
DomainTools Logo
Pricing Contact Login Support Request a Demo
  • Solutions
    • Use Cases
      • Threat Intelligence
      • Phishing and Fraud Prevention
      • Threat Hunting
      • Brand Protection
      • Forensics & Incident Response
      • Application Enrichment
    • Industries
      • Federal Government
      • Financial Services
      • Healthcare
      • Technology
      • Retail
  • Products
    • Iris Platform
      • Iris Detect 
      • Iris Enrich
      • Iris Investigate
    • Farsight DNSDB
    • Threat Intelligence Feeds
      • Predictive Risk Scoring
      • Hosting IP Risk Feed & Hotlist
      • Domain Risk Feed & Hotlist
      • Domain Visibility Feed
      • Domain Discovery Feed
      • Farsight Newly Active Domains
      • Farsight Newly Observed Hostnames
      • Farsight Newly Observed Domains
    • DomainTools Monitors
  • Integrations
    • SIEM
    • SOAR
    • Threat Intelligence
    • Anomali
    • Cortex XSOAR
    • CrowdStrike
    • Elastic
    • IBM QRadar
    • IBM Resilient
    • Maltego
    • MISP
    • Splunk
    • Splunk SOAR
    • TheHive and Cortex
  • Partners
    • Reseller Partner
    • Technology Partners
    • MSSP Partners
    • OEM Partners
    • Partner Portal
  • Company
    • Leadership
    • Careers
    • Pressroom
  • Resources
    • Resource Center
      • API Documentation
      • Events
    • Support and Learning
  • Link to Rss this site
  • Link to Facebook
  • Link to Twitter
  • Link to Linkedin

© 2025 DomainTools

DomainTools® and DomainTools™ are owned by DomainTools, all rights reserved.

Privacy Policy    |    California Privacy Notice
Do Not Sell My Personal Information    |    Terms of Service    |    Sitemap