DomainTools Investigations Inaugural Domain Intelligence Report Read More
  • Products
    • Products
    • Iris Intelligence Platform
      • The first place to go when you need to know.
      • Iris Investigate
        • Map connected infrastructure to get ahead of threats.
      • Iris Detect
        • Discover and monitor lookalike domains with unmatched speed and coverage.
      • Iris Enrich
        • Integrate DomainTools data with SIEM, SOAR, and other tools.
    • Farsight DNSDB
      • The world’s largest Passive DNS intelligence solution.
      • DNSDB API
        • Unlock the power of 13+ years of historical passive DNS data, updated in real time.
      • DNSDB Export
        • The “on-premise” version of DNSDB API resulting in the fastest response time, unlimited query volume, and total query privacy.
      • DNSDB Flexible Search
        • Regular expression search across every label of a fully qualified domain name and select RData.
    • Threat Intelligence Feeds
      • If it’s happening online, you’ll know.
      • Domain Visibility
        • Daily risk-scored domain list and targeted feeds.
      • Predictive Risk Score
        • Predictive risk scoring and infrastructure profiling.
  • Integrations
    • Integrations
      • SIEM
        • Enhance threat hunting and domain alerts in your preferred SIEM.
      • SOAR
        • Create event playbooks and take targeted action with our leading domain intelligence.
      • Threat Intelligence
        • Uncover actor infrastructure and profile threats in your preferred platform.
      • Getting Started
        • Transform threat data into intelligence with top security vendor partnerships.
  • Partners
    • Partners
      • Reseller Partner
        • VAR’s, Distributors, MSSP’s and System Integrators can grow revenue and improve margins.
      • OEM Partners
        • Cyber Product and Service companies can quickly advance and differentiate your solution.
      • Technology Partners
        • Cyber Technology Companies enhance and expand your capabilities.
  • Solutions
    • Solutions
    • By Use Case
      • Threat Intelligence
        • See the Internet. Identify risk.
      • Phishing and Fraud Prevention
        • Gain the early upper hand on emerging campaigns.
      • Threat Hunting
        • Make unknown threats known before they do damage.
      • Brand Protection
        • Defend your brand and reputation.
      • Forensics & Incident Response
        • Discover “who is” behind attacks and threats.
      • Application Enrichment
        • Build homegrown or third-party security applications with the world’s best Internet intelligence.
    • By Industry
      • Federal Government
        • Strengthening cybersecurity resilience across government systems.
      • Financial Services
        • Increasing the financial sector’s resilience against attacks.
      • Healthcare
        • Bolstering protection and defenses for PII and PHI.
      • Technology
        • Helping defenders of the high-tech attack surface.
      • Retail
        • Safeguarding against data breaches, consumer-based attacks, phishing, BEC, and other threats.
  • Company
    • Company
      • Leadership
        • Meet our exceptional executive team of experts and industry leaders.
      • Careers
        • Join our team to collaborate with exceptional people who are dedicated to protecting the Internet.
      • Pressroom
        • Access the latest DomainTools news and press coverage.
      • Contact
        • We’re here to help with product info, pricing, and current and future account services.
  • Resource Center
    • Resource Center
      • Knowledge Center
        • Blog
          • Explore our library of thought leadership articles and insights.
        • Webinars
          • Watch live and on-demand cybersecurity training from the DomainTools team.
        • Podcasts
          • Stream informative and exclusive episodes of DomainTools “Breaking Badness” podcast.
        • White Papers
          • Discover the real-world impact of DomainTools DNS intelligence.
    • Client Resources
      • User Guides
        • Navigate DomainTools features effortlessly with our comprehensive guides.
      • API Documentation
        • Access everything you need, including endpoint, response formats, sample queries, and product service levels.
      • Customer FAQs
        • Explore our in-depth Frequently Asked Questions by category to get the answers you need.
    • Featured
      DomainTools Reports
      DomainTools Investigations Inaugural Domain Intelligence Report
      Read More
  • -
  • Support and Learning
  • -
  • Request a Demo
  • Products
    • Products
    • Iris Intelligence Platform
      • The first place to go when you need to know.
      • Iris Investigate
        • Map connected infrastructure to get ahead of threats.
      • Iris Detect
        • Discover and monitor lookalike domains with unmatched speed and coverage.
      • Iris Enrich
        • Integrate DomainTools data with SIEM, SOAR, and other tools.
    • Farsight DNSDB
      • The world’s largest Passive DNS intelligence solution.
      • DNSDB API
        • Unlock the power of 13+ years of historical passive DNS data, updated in real time.
      • DNSDB Export
        • The “on-premise” version of DNSDB API resulting in the fastest response time, unlimited query volume, and total query privacy.
      • DNSDB Flexible Search
        • Regular expression search across every label of a fully qualified domain name and select RData.
    • Threat Intelligence Feeds
      • If it’s happening online, you’ll know.
      • Domain Visibility
        • Daily risk-scored domain list and targeted feeds.
      • Predictive Risk Score
        • Predictive risk scoring and infrastructure profiling.
  • Integrations
    • Integrations
      • SIEM
        • Enhance threat hunting and domain alerts in your preferred SIEM.
      • SOAR
        • Create event playbooks and take targeted action with our leading domain intelligence.
      • Threat Intelligence
        • Uncover actor infrastructure and profile threats in your preferred platform.
      • Getting Started
        • Transform threat data into intelligence with top security vendor partnerships.
  • Partners
    • Partners
      • Reseller Partner
        • VAR’s, Distributors, MSSP’s and System Integrators can grow revenue and improve margins.
      • OEM Partners
        • Cyber Product and Service companies can quickly advance and differentiate your solution.
      • Technology Partners
        • Cyber Technology Companies enhance and expand your capabilities.
  • Solutions
    • Solutions
    • By Use Case
      • Threat Intelligence
        • See the Internet. Identify risk.
      • Phishing and Fraud Prevention
        • Gain the early upper hand on emerging campaigns.
      • Threat Hunting
        • Make unknown threats known before they do damage.
      • Brand Protection
        • Defend your brand and reputation.
      • Forensics & Incident Response
        • Discover “who is” behind attacks and threats.
      • Application Enrichment
        • Build homegrown or third-party security applications with the world’s best Internet intelligence.
    • By Industry
      • Federal Government
        • Strengthening cybersecurity resilience across government systems.
      • Financial Services
        • Increasing the financial sector’s resilience against attacks.
      • Healthcare
        • Bolstering protection and defenses for PII and PHI.
      • Technology
        • Helping defenders of the high-tech attack surface.
      • Retail
        • Safeguarding against data breaches, consumer-based attacks, phishing, BEC, and other threats.
  • Company
    • Company
      • Leadership
        • Meet our exceptional executive team of experts and industry leaders.
      • Careers
        • Join our team to collaborate with exceptional people who are dedicated to protecting the Internet.
      • Pressroom
        • Access the latest DomainTools news and press coverage.
      • Contact
        • We’re here to help with product info, pricing, and current and future account services.
  • Resource Center
    • Resource Center
      • Knowledge Center
        • Blog
          • Explore our library of thought leadership articles and insights.
        • Webinars
          • Watch live and on-demand cybersecurity training from the DomainTools team.
        • Podcasts
          • Stream informative and exclusive episodes of DomainTools “Breaking Badness” podcast.
        • White Papers
          • Discover the real-world impact of DomainTools DNS intelligence.
    • Client Resources
      • User Guides
        • Navigate DomainTools features effortlessly with our comprehensive guides.
      • API Documentation
        • Access everything you need, including endpoint, response formats, sample queries, and product service levels.
      • Customer FAQs
        • Explore our in-depth Frequently Asked Questions by category to get the answers you need.
    • Featured
      DomainTools Reports
      DomainTools Investigations Inaugural Domain Intelligence Report
      Read More
  • -
  • Support and Learning
  • -
  • Request a Demo

Resources

Explore Research, Webinars, White Papers, and More

Tracking LummaC2 Infrastructure with Cats
Blog

Part 2: Tracking LummaC2 Infrastructure

Read more
A podcast cover image with the title "Cloudy with a Chance of Misattribution" and "Breaking Badness Podcast" logo. Four hosts are pictured below with "RSAC 2025 Edition" in the corner, all set against a blue and white ransomware supply chain theme.
Podcasts

Attribution in the Age of AI: Cloud Threats, Real Attacks,and Zero-Knowledge Adversaries

Listen Now
Inside Ransomware’s Supply Chain: Attribution, Rebrands, and Affiliate Betrayal
Podcasts

Inside Ransomware’s Supply Chain: Attribution, Rebrands, and Affiliate Betrayal

Listen Now
Filter Resources
Tracking LummaC2 Infrastructure with Cats
Blog

Part 2: Tracking LummaC2 Infrastructure

Read more
A podcast cover image with the title "Cloudy with a Chance of Misattribution" and "Breaking Badness Podcast" logo. Four hosts are pictured below with "RSAC 2025 Edition" in the corner, all set against a blue and white ransomware supply chain theme.
Podcasts

Attribution in the Age of AI: Cloud Threats, Real Attacks,and Zero-Knowledge Adversaries

Listen Now
Inside Ransomware’s Supply Chain: Attribution, Rebrands, and Affiliate Betrayal
Podcasts

Inside Ransomware’s Supply Chain: Attribution, Rebrands, and Affiliate Betrayal

Listen Now
How Attackers Use Domains, Phishing & AI and How to Fight Back
Podcasts

Beyond the Perimeter: How Attackers Use Domains, Phishing & AI and How to Fight Back

Listen Now
DomainTools Investigations May 2025 newsletter cover, titled "Security Research for the Community," features a portrait of Daniel Schwalbe, CISO & Head of Investigations, alongside the DomainTools logo.
Blog

Newsletter No. 5: A Little Bit of Research in my life…

Read more
Tracking LummaC2 Infrastructure with Cats
Blog

Tracking LummaC2 Infrastructure with Cats 

Read more
Two women smile before a blue background with bold text, "It takes a village to secure AI." The "Breaking Badness Podcast" logo and "RSAC 2025 Edition" appear, teasing Building Secure Campaigns and Better Humans: A Conversation with Mick Baccio.
Podcasts

It Takes a Village to Secure AI

Listen Now
Using DomainTools Iris to Enhance Classic Whois and RDAP
Blog

Using DomainTools Iris to Enhance Classic Whois and RDAP

Read more
Abstract digital image showing glowing lines and points forming network connections over a dark grid background with numbers and data symbols, representing data flow or Domains Targeting Spotify Job-Seekers in quantum computing concepts.
Blog

Cluster of Domains Targeting Spotify Job-Seekers

Read more
DomainTools Logo
Pricing Contact Login Support Request a Demo
  • Solutions
    • Use Cases
      • Threat Intelligence
      • Phishing and Fraud Prevention
      • Threat Hunting
      • Brand Protection
      • Forensics & Incident Response
      • Application Enrichment
    • Industries
      • Federal Government
      • Financial Services
      • Healthcare
      • Technology
      • Retail
  • Products
    • Iris Platform
      • Iris Detect 
      • Iris Enrich
      • Iris Investigate
    • Farsight DNSDB
    • Threat Intelligence Feeds
      • Predictive Risk Scoring
      • Hosting IP Risk Feed & Hotlist
      • Domain Risk Feed & Hotlist
      • Domain Visibility Feed
      • Domain Discovery Feed
      • Farsight Newly Active Domains
      • Farsight Newly Observed Hostnames
      • Farsight Newly Observed Domains
    • DomainTools Monitors
  • Integrations
    • SIEM
    • SOAR
    • Threat Intelligence
    • Anomali
    • Cortex XSOAR
    • CrowdStrike
    • Elastic
    • IBM QRadar
    • IBM Resilient
    • Maltego
    • MISP
    • Splunk
    • Splunk SOAR
    • TheHive and Cortex
  • Partners
    • Reseller Partner
    • Technology Partners
    • MSSP Partners
    • OEM Partners
    • Partner Portal
  • Company
    • Leadership
    • Careers
    • Pressroom
  • Resources
    • Resource Center
      • API Documentation
      • Events
    • Support and Learning
  • Link to Rss this site
  • Link to Facebook
  • Link to Twitter
  • Link to Linkedin

© 2025 DomainTools

DomainTools® and DomainTools™ are owned by DomainTools, all rights reserved.

Privacy Policy    |    California Privacy Notice
Do Not Sell My Personal Information    |    Terms of Service    |    Sitemap