DomainTools Investigations Inaugural Domain Intelligence Report Read More
  • Products
    • Products
    • Iris Intelligence Platform
      • The first place to go when you need to know.
      • Iris Investigate
        • Map connected infrastructure to get ahead of threats.
      • Iris Detect
        • Discover and monitor lookalike domains with unmatched speed and coverage.
      • Iris Enrich
        • Integrate DomainTools data with SIEM, SOAR, and other tools.
    • Farsight DNSDB
      • The world’s largest Passive DNS intelligence solution.
      • DNSDB API
        • Unlock the power of 13+ years of historical passive DNS data, updated in real time.
      • DNSDB Export
        • The “on-premise” version of DNSDB API resulting in the fastest response time, unlimited query volume, and total query privacy.
      • DNSDB Flexible Search
        • Regular expression search across every label of a fully qualified domain name and select RData.
    • Threat Intelligence Feeds
      • If it’s happening online, you’ll know.
      • Domain Visibility
        • Daily risk-scored domain list and targeted feeds.
      • Predictive Risk Score
        • Predictive risk scoring and infrastructure profiling.
  • Integrations
    • Integrations
      • SIEM
        • Enhance threat hunting and domain alerts in your preferred SIEM.
      • SOAR
        • Create event playbooks and take targeted action with our leading domain intelligence.
      • Threat Intelligence
        • Uncover actor infrastructure and profile threats in your preferred platform.
      • Getting Started
        • Transform threat data into intelligence with top security vendor partnerships.
  • Partners
    • Partners
      • Reseller Partner
        • VAR’s, Distributors, MSSP’s and System Integrators can grow revenue and improve margins.
      • OEM Partners
        • Cyber Product and Service companies can quickly advance and differentiate your solution.
      • Technology Partners
        • Cyber Technology Companies enhance and expand your capabilities.
  • Solutions
    • Solutions
    • By Use Case
      • Threat Intelligence
        • See the Internet. Identify risk.
      • Phishing and Fraud Prevention
        • Gain the early upper hand on emerging campaigns.
      • Threat Hunting
        • Make unknown threats known before they do damage.
      • Brand Protection
        • Defend your brand and reputation.
      • Forensics & Incident Response
        • Discover “who is” behind attacks and threats.
      • Application Enrichment
        • Build homegrown or third-party security applications with the world’s best Internet intelligence.
    • By Industry
      • Federal Government
        • Strengthening cybersecurity resilience across government systems.
      • Financial Services
        • Increasing the financial sector’s resilience against attacks.
      • Healthcare
        • Bolstering protection and defenses for PII and PHI.
      • Technology
        • Helping defenders of the high-tech attack surface.
      • Retail
        • Safeguarding against data breaches, consumer-based attacks, phishing, BEC, and other threats.
  • Company
    • Company
      • Leadership
        • Meet our exceptional executive team of experts and industry leaders.
      • Careers
        • Join our team to collaborate with exceptional people who are dedicated to protecting the Internet.
      • Pressroom
        • Access the latest DomainTools news and press coverage.
      • Contact
        • We’re here to help with product info, pricing, and current and future account services.
  • Resource Center
    • Resource Center
      • Knowledge Center
        • Blog
          • Explore our library of thought leadership articles and insights.
        • Webinars
          • Watch live and on-demand cybersecurity training from the DomainTools team.
        • Podcasts
          • Stream informative and exclusive episodes of DomainTools “Breaking Badness” podcast.
        • White Papers
          • Discover the real-world impact of DomainTools DNS intelligence.
    • Client Resources
      • User Guides
        • Navigate DomainTools features effortlessly with our comprehensive guides.
      • API Documentation
        • Access everything you need, including endpoint, response formats, sample queries, and product service levels.
      • Customer FAQs
        • Explore our in-depth Frequently Asked Questions by category to get the answers you need.
    • Featured
      DomainTools Reports
      DomainTools Investigations Inaugural Domain Intelligence Report
      Read More
  • -
  • Support and Learning
  • -
  • Request a Demo
  • Products
    • Products
    • Iris Intelligence Platform
      • The first place to go when you need to know.
      • Iris Investigate
        • Map connected infrastructure to get ahead of threats.
      • Iris Detect
        • Discover and monitor lookalike domains with unmatched speed and coverage.
      • Iris Enrich
        • Integrate DomainTools data with SIEM, SOAR, and other tools.
    • Farsight DNSDB
      • The world’s largest Passive DNS intelligence solution.
      • DNSDB API
        • Unlock the power of 13+ years of historical passive DNS data, updated in real time.
      • DNSDB Export
        • The “on-premise” version of DNSDB API resulting in the fastest response time, unlimited query volume, and total query privacy.
      • DNSDB Flexible Search
        • Regular expression search across every label of a fully qualified domain name and select RData.
    • Threat Intelligence Feeds
      • If it’s happening online, you’ll know.
      • Domain Visibility
        • Daily risk-scored domain list and targeted feeds.
      • Predictive Risk Score
        • Predictive risk scoring and infrastructure profiling.
  • Integrations
    • Integrations
      • SIEM
        • Enhance threat hunting and domain alerts in your preferred SIEM.
      • SOAR
        • Create event playbooks and take targeted action with our leading domain intelligence.
      • Threat Intelligence
        • Uncover actor infrastructure and profile threats in your preferred platform.
      • Getting Started
        • Transform threat data into intelligence with top security vendor partnerships.
  • Partners
    • Partners
      • Reseller Partner
        • VAR’s, Distributors, MSSP’s and System Integrators can grow revenue and improve margins.
      • OEM Partners
        • Cyber Product and Service companies can quickly advance and differentiate your solution.
      • Technology Partners
        • Cyber Technology Companies enhance and expand your capabilities.
  • Solutions
    • Solutions
    • By Use Case
      • Threat Intelligence
        • See the Internet. Identify risk.
      • Phishing and Fraud Prevention
        • Gain the early upper hand on emerging campaigns.
      • Threat Hunting
        • Make unknown threats known before they do damage.
      • Brand Protection
        • Defend your brand and reputation.
      • Forensics & Incident Response
        • Discover “who is” behind attacks and threats.
      • Application Enrichment
        • Build homegrown or third-party security applications with the world’s best Internet intelligence.
    • By Industry
      • Federal Government
        • Strengthening cybersecurity resilience across government systems.
      • Financial Services
        • Increasing the financial sector’s resilience against attacks.
      • Healthcare
        • Bolstering protection and defenses for PII and PHI.
      • Technology
        • Helping defenders of the high-tech attack surface.
      • Retail
        • Safeguarding against data breaches, consumer-based attacks, phishing, BEC, and other threats.
  • Company
    • Company
      • Leadership
        • Meet our exceptional executive team of experts and industry leaders.
      • Careers
        • Join our team to collaborate with exceptional people who are dedicated to protecting the Internet.
      • Pressroom
        • Access the latest DomainTools news and press coverage.
      • Contact
        • We’re here to help with product info, pricing, and current and future account services.
  • Resource Center
    • Resource Center
      • Knowledge Center
        • Blog
          • Explore our library of thought leadership articles and insights.
        • Webinars
          • Watch live and on-demand cybersecurity training from the DomainTools team.
        • Podcasts
          • Stream informative and exclusive episodes of DomainTools “Breaking Badness” podcast.
        • White Papers
          • Discover the real-world impact of DomainTools DNS intelligence.
    • Client Resources
      • User Guides
        • Navigate DomainTools features effortlessly with our comprehensive guides.
      • API Documentation
        • Access everything you need, including endpoint, response formats, sample queries, and product service levels.
      • Customer FAQs
        • Explore our in-depth Frequently Asked Questions by category to get the answers you need.
    • Featured
      DomainTools Reports
      DomainTools Investigations Inaugural Domain Intelligence Report
      Read More
  • -
  • Support and Learning
  • -
  • Request a Demo

Resources

Explore Research, Webinars, White Papers, and More

abstract image
Blog

Why Your Protective DNS Needs Real-Time Data: The DomainTools Advantage

Read more
Four people are pictured in black and white on a blue background with the text "You had me at DNS." The "Breaking Badness Podcast" logo appears in the top right corner, highlighting discussions on ransomware and supply chain threats.
Podcasts

Why DNS Is Still the Biggest Blind Spot in Threat Intelligence

Listen Now
Two women smiling in a promotional image for the Breaking Badness Podcast. The text reads, “Surge Forward: From Newsrooms to Threat Rooms—ransomware supply chain insights. RSAC 2025 Edition.” The background has a blue gradient.
Podcasts

From Newsroom to Threat Room: Audra Streetman’s Journey into Cybersecurity

Listen Now
Filter Resources
DomainTools Investigations Domain Intelligence Report
Blog

The Domains Start Coming and They Don’t Stop Coming

Read more
Five people are shown in black and white at the bottom of a blue gradient background. Text reads "DFIRSIDE CHAT: PART 2," highlighting a DFIR discussion. The top right corner features the "Breaking Badness Podcast" logo.
Podcasts

DFIR Foundations: Real-World Lessons in Containment, Eradication, and Recovery

Listen Now
Verizon DBIR 2025 DomainTools Reflections
Blog

DomainTools Reflections on the 2025 Verizon DBIR

Read more
Abstract digital network with glowing blue and orange points connected by lines, resembling DNSDB Plus Sign Wildcard queries, forming two dynamic, wavy mesh layers on a black background.
Blog

DNSDB Standard Search's New "Plus Sign" Wildcard: It Matches Exactly One Label

Read more
Blog

The Role of Domain and DNS Intelligence in Fighting Online Threats

Read more
Five smiling people are shown in black and white below the text “DFIRSide Chat: Part 1” on a blue gradient background. In the top right, the “Breaking Badness Podcast” logo appears, hinting at a discussion on Russian disinformation.
Podcasts

DFIRside Chat: Lessons from the Frontlines of Incident Response

Listen Now
Leveraging DomainTools for Early Detection of Russian Disinformation Operations
Blog

Leveraging DomainTools for Early Detection of Russian Disinformation Operations

Read more
A network of interconnected glowing lines and nodes in blue and green forms an abstract web against a dark background, capturing the essence of digital communication. The intricate pattern mirrors the complexity of finding fast flux solutions in technology.
Blog

Finding Fast Flux Fully Qualified Domain Names Using the SIE DNS Changes Channel

Read more
Podcast cover art titled "Liar, Liar, Domain on Fire" showcases a DNS Masterclass theme. It features three people: one with long hair and glasses, another in a furry hat, and one with short hair. The "Breaking Badness Podcast" logo graces the top right corner.
Podcasts

How Russian Disinformation Campaigns Exploit Domain Registrars and AI

Listen Now
DomainTools Logo
Pricing Contact Login Support Request a Demo
  • Solutions
    • Use Cases
      • Threat Intelligence
      • Phishing and Fraud Prevention
      • Threat Hunting
      • Brand Protection
      • Forensics & Incident Response
      • Application Enrichment
    • Industries
      • Federal Government
      • Financial Services
      • Healthcare
      • Technology
      • Retail
  • Products
    • Iris Platform
      • Iris Detect 
      • Iris Enrich
      • Iris Investigate
    • Farsight DNSDB
    • Threat Intelligence Feeds
      • Predictive Risk Scoring
      • Hosting IP Risk Feed & Hotlist
      • Domain Risk Feed & Hotlist
      • Domain Visibility Feed
      • Domain Discovery Feed
      • Farsight Newly Active Domains
      • Farsight Newly Observed Hostnames
      • Farsight Newly Observed Domains
    • DomainTools Monitors
  • Integrations
    • SIEM
    • SOAR
    • Threat Intelligence
    • Anomali
    • Cortex XSOAR
    • CrowdStrike
    • Elastic
    • IBM QRadar
    • IBM Resilient
    • Maltego
    • MISP
    • Splunk
    • Splunk SOAR
    • TheHive and Cortex
  • Partners
    • Reseller Partner
    • Technology Partners
    • MSSP Partners
    • OEM Partners
    • Partner Portal
  • Company
    • Leadership
    • Careers
    • Pressroom
  • Resources
    • Resource Center
      • API Documentation
      • Events
    • Support and Learning
  • Link to Rss this site
  • Link to Facebook
  • Link to Twitter
  • Link to Linkedin

© 2025 DomainTools

DomainTools® and DomainTools™ are owned by DomainTools, all rights reserved.

Privacy Policy    |    California Privacy Notice
Do Not Sell My Personal Information    |    Terms of Service    |    Sitemap