Detect. Investigate. Prevent.
DomainTools helps security analysts turn threat data into threat intelligence. They take indicators from your network, including domains and IPs, and connect them with nearly every active domain on the Internet. Those connections inform risk assessments, help profile attackers, guide online fraud investigations, and map cyber activity to attacker infrastructure.
Our goal is to stop security threats to your organization before they happen, using domain/DNS data, predictive analysis, and monitoring of trends on the Internet. They collect Open Source Intelligence (OSINT) data from many sources, along with historical records, in a central database. They index and analyze the data based on various connection algorithms to deliver actionable intelligence, including domain scoring and forensic mapping.
DomainTools has over 10 billion related DNS data points to build a map of ‘who’s doing what’ on the Internet. Fortune 1000 companies, global government agencies, and leading security solution vendors use the DomainTools platform as a critical ingredient in their threat investigation and mitigation work.
For over 15 years, DomainTools has been the most popular Whois research service on the internet because we have the most comprehensive coverage of generic and country code Top Level Domains. They have also collected and stored Whois and related hosting/DNS data to provide the most complete historical records in the industry.