Threat Intelligence Tools

with DomainTools®

See the Internet. Identify risk.

DomainTools solutions threat intelligence hero image

There are an estimated five billion connected users on the Internet. Over 100M new domains are registered every year. That’s a lot of Internet to keep track of.

DomainTools solutions threat intelligence estimated five billion connected users image

An image showing the cover of a report titled "the economic benefits of domaintools for critical infrastructure and energy security" with a dark abstract background and a sheet of paper beside it.
ESG Report
The Economic Benefits of DomainTools Internet Intelligence
Detect and Respond to Threats 96% Faster

DomainTools is the only provider that covers over 97% of the Internet in near-real-time.

See threats coming with DomainTools

The DomainTools Iris platform gives you focused access to the gold standard in Internet intelligence. Or add our threat intelligence feeds or direct API subscriptions to your program, and never be caught off-guard.

Platform, APIs and Data

Detect and monitor spoofed or lookalike domains to get ahead of attacks.

Enrich on-network indicators with the freshest data, at scale, in near-real-time.

Map adversary
infrastructure and streamline investigations.

Use comprehensive, passive DNS data for near real-time and historical context.

Threat Intelligence Feeds

Predict the risk level and likely threats from domains and IP addresses before they do damage.

  • Hosting IP Risk Feed and Hotlist
  • Domain Risk Feed and Hotlist

Anticipate nascent campaigns with the freshest data on newly discovered or active domains, IPs and hostnames.

  • Domain Discovery Feed
  • Farsight Newly Active Domains
  • Farsight Newly Observed Hostnames
  • Farsight Newly Observed Domains
DomainTools Testimonial Incident Response Center

DomainTools provides us with insights that allow us to identify potential threats before they occur.”

—  Global Manager, Incident Response Center

DomainTools Testimonial Dean Oberholzer

DomainTools saves our investigators an enormous amount of time which means our clients save a significant amount of money.”

— Dean Oberholzer, Consultant, Horizon Forensics

DomainTools Testimonial Major City Agency

Iris provides us with an important new lens across the threat landscape, allowing our team to literally see things we couldn’t see before.”

— CISO, Major City Agency

DomainTools Testimonial John Todd

The results have been outstanding! This has been a very successful threat source activation for Quad9… and it’s clearly been a big win for helping to keep our users safe.”

— John Todd, Executive Director, Quad9

The DomainTools Difference

We make connections and assign risk to everything we see and find. And we find a lot.

Built on

20 years

of engineering experience and threat knowledge

DomainTools masonry circle

Access to


of open-source data points

DomainTools masonry star

Reaches into


of the full internet

DomainTools masonry monitor
Updated in near-real-time

Do More with DomainTools

Use the most extensive platform and data to power your program.

Respond to and triage potential incidents with confidence and speed.

Know if and when malicious domains are spoofing your assets before they cause damage.

Discover IOCs and malicious infrastructure that may be hiding inside your network.

Monitor your online assets and protect your brand against cybercriminals.

Empower your homegrown or third party security applications with the world’s best Internet intelligence.

DomainTools is the threat intelligence engine that powers best-in-class security programs.

With near-real-time visibility into 97% of the Internet, you can detect threats earlier in their lifecycle without adding noise.

Gain situational awareness

DomainTools gives you the data and insight necessary to understand what’s happening on the Internet that might pose a threat.

DomainTools solutions threat intelligence gain situational awareness image
DomainTools solutions threat intelligence defend against future attacks image

Defend against future attacks

Near-real-time visibility gives you the upper hand in seeing attacker infrastructure as it’s built, before attacks are launched.

Fight back

Predictive risk scoring, with full-Internet context, lets you know which threats are critical and how to stop them in their tracks.

DomainTools solutions threat intelligence fight back image