DomainTools Investigations Inaugural Domain Intelligence Report Read More
  • Products
    • Products
    • Iris Intelligence Platform
      • The first place to go when you need to know.
      • Iris Investigate
        • Map connected infrastructure to get ahead of threats.
      • Iris Detect
        • Discover and monitor lookalike domains with unmatched speed and coverage.
      • Iris Enrich
        • Integrate DomainTools data with SIEM, SOAR, and other tools.
    • Farsight DNSDB
      • The world’s largest Passive DNS intelligence solution.
      • DNSDB API
        • Unlock the power of 13+ years of historical passive DNS data, updated in real time.
      • DNSDB Export
        • The “on-premise” version of DNSDB API resulting in the fastest response time, unlimited query volume, and total query privacy.
      • DNSDB Flexible Search
        • Regular expression search across every label of a fully qualified domain name and select RData.
    • Threat Intelligence Feeds
      • If it’s happening online, you’ll know.
      • Domain Visibility
        • Daily risk-scored domain list and targeted feeds.
      • Predictive Risk Score
        • Predictive risk scoring and infrastructure profiling.
  • Integrations
    • Integrations
      • SIEM
        • Enhance threat hunting and domain alerts in your preferred SIEM.
      • SOAR
        • Create event playbooks and take targeted action with our leading domain intelligence.
      • Threat Intelligence
        • Uncover actor infrastructure and profile threats in your preferred platform.
      • Getting Started
        • Transform threat data into intelligence with top security vendor partnerships.
  • Partners
    • Partners
      • Reseller Partner
        • VAR’s, Distributors, MSSP’s and System Integrators can grow revenue and improve margins.
      • OEM Partners
        • Cyber Product and Service companies can quickly advance and differentiate your solution.
      • Technology Partners
        • Cyber Technology Companies enhance and expand your capabilities.
  • Solutions
    • Solutions
    • By Use Case
      • Threat Intelligence
        • See the Internet. Identify risk.
      • Phishing and Fraud Prevention
        • Gain the early upper hand on emerging campaigns.
      • Threat Hunting
        • Make unknown threats known before they do damage.
      • Brand Protection
        • Defend your brand and reputation.
      • Forensics & Incident Response
        • Discover “who is” behind attacks and threats.
      • Application Enrichment
        • Build homegrown or third-party security applications with the world’s best Internet intelligence.
    • By Industry
      • Federal Government
        • Strengthening cybersecurity resilience across government systems.
      • Financial Services
        • Increasing the financial sector’s resilience against attacks.
      • Healthcare
        • Bolstering protection and defenses for PII and PHI.
      • Technology
        • Helping defenders of the high-tech attack surface.
      • Retail
        • Safeguarding against data breaches, consumer-based attacks, phishing, BEC, and other threats.
  • Company
    • Company
      • Leadership
        • Meet our exceptional executive team of experts and industry leaders.
      • Careers
        • Join our team to collaborate with exceptional people who are dedicated to protecting the Internet.
      • Pressroom
        • Access the latest DomainTools news and press coverage.
      • Contact
        • We’re here to help with product info, pricing, and current and future account services.
  • Resource Center
    • Resource Center
      • Knowledge Center
        • Blog
          • Explore our library of thought leadership articles and insights.
        • Webinars
          • Watch live and on-demand cybersecurity training from the DomainTools team.
        • Podcasts
          • Stream informative and exclusive episodes of DomainTools “Breaking Badness” podcast.
        • White Papers
          • Discover the real-world impact of DomainTools DNS intelligence.
    • Client Resources
      • User Guides
        • Navigate DomainTools features effortlessly with our comprehensive guides.
      • API Documentation
        • Access everything you need, including endpoint, response formats, sample queries, and product service levels.
      • Customer FAQs
        • Explore our in-depth Frequently Asked Questions by category to get the answers you need.
    • Featured
      DomainTools Reports
      DomainTools Investigations Inaugural Domain Intelligence Report
      Read More
  • -
  • Support and Learning
  • -
  • Request a Demo
  • Products
    • Products
    • Iris Intelligence Platform
      • The first place to go when you need to know.
      • Iris Investigate
        • Map connected infrastructure to get ahead of threats.
      • Iris Detect
        • Discover and monitor lookalike domains with unmatched speed and coverage.
      • Iris Enrich
        • Integrate DomainTools data with SIEM, SOAR, and other tools.
    • Farsight DNSDB
      • The world’s largest Passive DNS intelligence solution.
      • DNSDB API
        • Unlock the power of 13+ years of historical passive DNS data, updated in real time.
      • DNSDB Export
        • The “on-premise” version of DNSDB API resulting in the fastest response time, unlimited query volume, and total query privacy.
      • DNSDB Flexible Search
        • Regular expression search across every label of a fully qualified domain name and select RData.
    • Threat Intelligence Feeds
      • If it’s happening online, you’ll know.
      • Domain Visibility
        • Daily risk-scored domain list and targeted feeds.
      • Predictive Risk Score
        • Predictive risk scoring and infrastructure profiling.
  • Integrations
    • Integrations
      • SIEM
        • Enhance threat hunting and domain alerts in your preferred SIEM.
      • SOAR
        • Create event playbooks and take targeted action with our leading domain intelligence.
      • Threat Intelligence
        • Uncover actor infrastructure and profile threats in your preferred platform.
      • Getting Started
        • Transform threat data into intelligence with top security vendor partnerships.
  • Partners
    • Partners
      • Reseller Partner
        • VAR’s, Distributors, MSSP’s and System Integrators can grow revenue and improve margins.
      • OEM Partners
        • Cyber Product and Service companies can quickly advance and differentiate your solution.
      • Technology Partners
        • Cyber Technology Companies enhance and expand your capabilities.
  • Solutions
    • Solutions
    • By Use Case
      • Threat Intelligence
        • See the Internet. Identify risk.
      • Phishing and Fraud Prevention
        • Gain the early upper hand on emerging campaigns.
      • Threat Hunting
        • Make unknown threats known before they do damage.
      • Brand Protection
        • Defend your brand and reputation.
      • Forensics & Incident Response
        • Discover “who is” behind attacks and threats.
      • Application Enrichment
        • Build homegrown or third-party security applications with the world’s best Internet intelligence.
    • By Industry
      • Federal Government
        • Strengthening cybersecurity resilience across government systems.
      • Financial Services
        • Increasing the financial sector’s resilience against attacks.
      • Healthcare
        • Bolstering protection and defenses for PII and PHI.
      • Technology
        • Helping defenders of the high-tech attack surface.
      • Retail
        • Safeguarding against data breaches, consumer-based attacks, phishing, BEC, and other threats.
  • Company
    • Company
      • Leadership
        • Meet our exceptional executive team of experts and industry leaders.
      • Careers
        • Join our team to collaborate with exceptional people who are dedicated to protecting the Internet.
      • Pressroom
        • Access the latest DomainTools news and press coverage.
      • Contact
        • We’re here to help with product info, pricing, and current and future account services.
  • Resource Center
    • Resource Center
      • Knowledge Center
        • Blog
          • Explore our library of thought leadership articles and insights.
        • Webinars
          • Watch live and on-demand cybersecurity training from the DomainTools team.
        • Podcasts
          • Stream informative and exclusive episodes of DomainTools “Breaking Badness” podcast.
        • White Papers
          • Discover the real-world impact of DomainTools DNS intelligence.
    • Client Resources
      • User Guides
        • Navigate DomainTools features effortlessly with our comprehensive guides.
      • API Documentation
        • Access everything you need, including endpoint, response formats, sample queries, and product service levels.
      • Customer FAQs
        • Explore our in-depth Frequently Asked Questions by category to get the answers you need.
    • Featured
      DomainTools Reports
      DomainTools Investigations Inaugural Domain Intelligence Report
      Read More
  • -
  • Support and Learning
  • -
  • Request a Demo

Resources

Explore Research, Webinars, White Papers, and More

Two women smiling in a promotional image for the Breaking Badness Podcast. The text reads, “Surge Forward: From Newsrooms to Threat Rooms—ransomware supply chain insights. RSAC 2025 Edition.” The background has a blue gradient.
Podcasts

From Newsroom to Threat Room: Audra Streetman’s Journey into Cybersecurity

Listen Now
Two smiling people in business attire are shown on a blue gradient background. Large text reads “Quantum of Attack Surface,” with “Breaking Badness Podcast” and “RSAC 2025 Edition,” highlighting ransomware supply chain insights.
Podcasts

The Multi-Cloud Mess: Why Complexity Is Killing Visibility

Listen Now
Tracking LummaC2 Infrastructure with Cats
Blog

Part 2: Tracking LummaC2 Infrastructure

Read more
Filter Resources
Two women smiling in a promotional image for the Breaking Badness Podcast. The text reads, “Surge Forward: From Newsrooms to Threat Rooms—ransomware supply chain insights. RSAC 2025 Edition.” The background has a blue gradient.
Podcasts

From Newsroom to Threat Room: Audra Streetman’s Journey into Cybersecurity

Listen Now
Two smiling people in business attire are shown on a blue gradient background. Large text reads “Quantum of Attack Surface,” with “Breaking Badness Podcast” and “RSAC 2025 Edition,” highlighting ransomware supply chain insights.
Podcasts

The Multi-Cloud Mess: Why Complexity Is Killing Visibility

Listen Now
Tracking LummaC2 Infrastructure with Cats
Blog

Part 2: Tracking LummaC2 Infrastructure

Read more
A podcast cover image with the title "Cloudy with a Chance of Misattribution" and "Breaking Badness Podcast" logo. Four hosts are pictured below with "RSAC 2025 Edition" in the corner, all set against a blue and white ransomware supply chain theme.
Podcasts

Attribution in the Age of AI: Cloud Threats, Real Attacks,and Zero-Knowledge Adversaries

Listen Now
Inside Ransomware’s Supply Chain: Attribution, Rebrands, and Affiliate Betrayal
Podcasts

Inside Ransomware’s Supply Chain: Attribution, Rebrands, and Affiliate Betrayal

Listen Now
How Attackers Use Domains, Phishing & AI and How to Fight Back
Podcasts

Beyond the Perimeter: How Attackers Use Domains, Phishing & AI and How to Fight Back

Listen Now
DomainTools Investigations May 2025 newsletter cover, titled "Security Research for the Community," features a portrait of Daniel Schwalbe, CISO & Head of Investigations, alongside the DomainTools logo.
Blog

Newsletter No. 5: A Little Bit of Research in my life…

Read more
Tracking LummaC2 Infrastructure with Cats
Blog

Tracking LummaC2 Infrastructure with Cats 

Read more
Two women smile before a blue background with bold text, "It takes a village to secure AI." The "Breaking Badness Podcast" logo and "RSAC 2025 Edition" appear, teasing Building Secure Campaigns and Better Humans: A Conversation with Mick Baccio.
Podcasts

It Takes a Village to Secure AI

Listen Now
DomainTools Logo
Pricing Contact Login Support Request a Demo
  • Solutions
    • Use Cases
      • Threat Intelligence
      • Phishing and Fraud Prevention
      • Threat Hunting
      • Brand Protection
      • Forensics & Incident Response
      • Application Enrichment
    • Industries
      • Federal Government
      • Financial Services
      • Healthcare
      • Technology
      • Retail
  • Products
    • Iris Platform
      • Iris Detect 
      • Iris Enrich
      • Iris Investigate
    • Farsight DNSDB
    • Threat Intelligence Feeds
      • Predictive Risk Scoring
      • Hosting IP Risk Feed & Hotlist
      • Domain Risk Feed & Hotlist
      • Domain Visibility Feed
      • Domain Discovery Feed
      • Farsight Newly Active Domains
      • Farsight Newly Observed Hostnames
      • Farsight Newly Observed Domains
    • DomainTools Monitors
  • Integrations
    • SIEM
    • SOAR
    • Threat Intelligence
    • Anomali
    • Cortex XSOAR
    • CrowdStrike
    • Elastic
    • IBM QRadar
    • IBM Resilient
    • Maltego
    • MISP
    • Splunk
    • Splunk SOAR
    • TheHive and Cortex
  • Partners
    • Reseller Partner
    • Technology Partners
    • MSSP Partners
    • OEM Partners
    • Partner Portal
  • Company
    • Leadership
    • Careers
    • Pressroom
  • Resources
    • Resource Center
      • API Documentation
      • Events
    • Support and Learning
  • Link to Rss this site
  • Link to Facebook
  • Link to Twitter
  • Link to Linkedin

© 2025 DomainTools

DomainTools® and DomainTools™ are owned by DomainTools, all rights reserved.

Privacy Policy    |    California Privacy Notice
Do Not Sell My Personal Information    |    Terms of Service    |    Sitemap