Threat Intelligence Feeds
from DomainTools®
If it’s happening on the Internet, you’ll know.
30,000 malicious domains are registered every day. DomainTools Feeds help you act first.
Centripetal leads the industry in operationalizing global threat intelligence to proactively protect our CleanINTERNET customers from all known cyber threats. DomainTools has been a valued strategic partner for years, and in 2024, we leveraged over 99.9% of their feed data to prevent domain-related incidents—contributing to our exceptionally low false positive rate across 1.2 trillion indicators.
Through close collaboration this year, we were among the first to adopt DomainTools’ Real Time Feeds and API, reducing the time from threat discovery to active prevention to under one minute. This level of speed and accuracy effectively closes the window for domain-based attacks. DomainTools has set a new standard for real-time, high-fidelity intelligence—critical to any modern, proactive defense strategy.
Dave Ahn
Chief Architect and VP, Centripetal
Real-Time Feeds for Proactive Security
Transform your security posture from reactive to proactive with Real-Time Feeds. Supported by 97% Internet visibility and seamless integrations with leading security platforms, Real-Time Feeds provide instant visibility into new and potential risky online infrastructure.
Illuminated Defense
Detect and act on new, risky domains and hostnames
Plug and Play
Enrich your tech stack in as quickly as one day
Unmatched Coverage
Get the best view of the Internet with industry-leading context
Risk Feeds
Predictive feeds to identify new, potentially risky infrastructure.
Domain Risk
All high-risk domains with scores for phishing, malware, spam, and proximity.
Domain Hotlist
Highest-risk domains that are also active in passive DNS in the past 24 hours.
Discovery Feeds
Delivering data on new domains and hostnames.
Newly Observed Domains
Domains never before observed in passive DNS
Newly Active Domains
Domains not observed in passive DNS in the previous 10 days
Domain Discovery
Newly discovered domains, including new registrations
not active in passive DNS
Newly Observed Hostnames
Fully qualified domain names never before observed in passive DNS
Proactive Defense
Automatically block communication between your devices and potentially harmful domains to protect your network, employees, and customers.
Threat Detection
Accelerate incident response by spotting when your devices are connecting to the newest, highest-risk domains. Use automated processes to investigate and prioritize threats based on their risk level, reducing alert fatigue.
Brand and Supply Chain Monitoring
Automatically block communication between your devices and potentially harmful domains to protect your network, employees, and customers.
Tracking DGA Domains
Detect new, algorithmically-generated domains associated with known cyber threats as soon as they appear or become active.
Enrich Your Tech Stack
Leverage DomainTools feeds to get even more value out of your TIP, SIEM, and SOAR.
