# DomainTools

> DomainTools is the global leader in DNS-based threat intelligence, providing visibility into over 97% of internet infrastructure. The platform helps security teams detect, investigate, and block malicious domains through passive DNS data, risk scoring, and guided pivot analysis across interconnected threat infrastructure.

DomainTools maps virtually the entire internet to identify and predict threats. Its products — Iris Investigate, Iris Detect, and Iris Enrich — enable threat hunting, brand monitoring, fraud prevention, and incident response. The platform integrates with all major SOC tools including SIEMs, SOARs, and TIPs. DomainTools also maintains DNSDB, the world's largest passive DNS database with over a decade of historical DNS resolution data.

## Platform

- [Platform Overview](https://www.domaintools.com/platform): Core capabilities including Iris Investigate, Iris Detect, Iris Enrich, and DNSDB passive DNS
- [Threat Intelligence Feeds](https://www.domaintools.com/feeds): Predictive risk scoring and domain visibility data feeds
- [Domain Research](https://www.domaintools.com/products/domain-research): Whois lookup, reverse Whois, and domain history tools
- [Pricing](https://www.domaintools.com/products/pricing): Plans and pricing for domain research tools
- [Platform Benefits](https://www.domaintools.com/benefits): Key advantages of the DomainTools platform
- [Request a Demo](https://www.domaintools.com/demo): Schedule a personalized platform demonstration

## Integrations

- [Integrations Overview](https://www.domaintools.com/integrations): All supported security platform integrations
- [Splunk](https://www.domaintools.com/integrations/splunk): Splunk SIEM integration
- [Splunk SOAR](https://www.domaintools.com/integrations/splunk-soar): Splunk SOAR automation integration
- [Microsoft Sentinel](https://www.domaintools.com/integrations/microsoft-sentinel): Microsoft Sentinel integration
- [CrowdStrike](https://www.domaintools.com/integrations/crowdstrike): CrowdStrike Falcon integration
- [IBM QRadar](https://www.domaintools.com/integrations/ibm-qradar): IBM QRadar SIEM integration
- [Cortex XSOAR](https://www.domaintools.com/integrations/cortex-xsoar): Palo Alto Cortex XSOAR integration
- [Maltego](https://www.domaintools.com/integrations/maltego): Maltego visual link analysis integration
- [Elastic ELK Stack](https://www.domaintools.com/integrations/elastic-elk-stack): Elastic SIEM integration
- [Google SOAR](https://www.domaintools.com/integrations/google-soar): Google Chronicle SOAR integration
- [MISP](https://www.domaintools.com/integrations/misp): Open-source threat intelligence platform integration
- [ServiceNow](https://www.domaintools.com/integrations/servicenow): ServiceNow Security Operations integration
- [Rapid7](https://www.domaintools.com/integrations/rapid7): Rapid7 InsightConnect integration
- [ThreatConnect](https://www.domaintools.com/integrations/threatconnect): ThreatConnect TIP integration
- [Recorded Future](https://www.domaintools.com/integrations/recorded-future): Recorded Future integration
- [TheHive and Cortex](https://www.domaintools.com/integrations/thehive-and-cortex): TheHive incident response integration
- [Anomali](https://www.domaintools.com/integrations/anomali): Anomali ThreatStream integration
- [EclecticIQ](https://www.domaintools.com/integrations/eclecticiq): EclecticIQ threat intelligence integration
- [IBM Resilient](https://www.domaintools.com/integrations/ibm-resilient): IBM Resilient SOAR integration
- [Exabeam](https://www.domaintools.com/integrations/exabeam): Exabeam SIEM integration
- [ThreatQ](https://www.domaintools.com/integrations/threatq): ThreatQ threat intelligence integration
- [Polarity](https://www.domaintools.com/integrations/polarity): Polarity overlay integration
- [Tines](https://www.domaintools.com/integrations/tines): Tines automation integration
- [Torq](https://www.domaintools.com/integrations/torq): Torq hyperautomation integration

## Documentation

- [API & Product Documentation](https://docs.domaintools.com/): Complete technical documentation, API references, and user guides
- [Iris Investigate User Guide](https://docs.domaintools.com/iris/investigate/userguide/): How to use Iris Investigate for threat analysis
- [Iris Detect](https://docs.domaintools.com/iris/): Iris Detect product documentation
- [DNSDB Documentation](https://docs.domaintools.com/dnsdb/): Passive DNS database documentation and search guides
- [DNSDB API Reference](https://docs.domaintools.com/api/dnsdb/userguide/): DNSDB API programmer documentation
- [Risk Score User Guide](https://docs.domaintools.com/riskscore/userguide/): Domain risk scoring methodology and usage
- [Changelog](https://docs.domaintools.com/changelog/): Product updates and release notes

## Resources

- [Resource Center](https://www.domaintools.com/resource-center): All resources including white papers, reports, webinars, and case studies
- [Blog](https://www.domaintools.com/resources/blog): Threat intelligence articles, research, and industry analysis
- [White Papers](https://www.domaintools.com/resources/white-papers): In-depth research and technical white papers
- [Case Studies](https://www.domaintools.com/resources/case-studies): Customer success stories and use cases
- [Survey Reports](https://www.domaintools.com/resources/survey-reports): Industry survey findings including annual threat hunting reports
- [DomainTools Reports](https://www.domaintools.com/resources/domaintools-reports): Original DomainTools research reports
- [Webinars](https://www.domaintools.com/resources/webinars): On-demand and upcoming webinars
- [Podcasts](https://www.domaintools.com/resources/podcasts): Breaking Badness podcast episodes on cybersecurity topics

## Threat Research

- [DomainTools Investigations](https://dti.domaintools.com): Threat research and intelligence from the DomainTools investigations team

## Company

- [About DomainTools](https://www.domaintools.com/company/about): Company background, mission, and leadership
- [Press](https://www.domaintools.com/company/press): Press releases and media coverage
- [Careers](https://www.domaintools.com/company/careers): Open positions at DomainTools
- [Partners](https://www.domaintools.com/partners): Partnership program information
- [Events](https://www.domaintools.com/events): Conferences and events where DomainTools participates
- [Contact](https://www.domaintools.com/contact): Contact sales, support, and general inquiries

## Optional

- [Newsletter Signup](https://www.domaintools.com/newsletter): Subscribe to the DomainTools newsletter
- [DTI Newsletter](https://www.domaintools.com/investigations-newsletter-reg): DomainTools Investigations newsletter registration
- [RSS Feed](https://www.domaintools.com/rss): RSS feed for blog and content updates
- [Search](https://www.domaintools.com/search): Site search
- [Privacy Policy](https://www.domaintools.com/policies/privacy-policy): Privacy policy
- [Terms of Service](https://www.domaintools.com/policies/terms-of-service): Terms of service
- [California Privacy Notice](https://www.domaintools.com/policies/california-privacy-notice): CCPA privacy notice
- [Do Not Sell](https://www.domaintools.com/policies/do-not-sell): Do not sell my personal information
- [Enterprise Subscription Agreement](https://www.domaintools.com/policies/enterprise-subscription-agreement): Enterprise licensing terms
- [Service Level Agreement](https://www.domaintools.com/policies/service-level-agreement): SLA details