DomainTools

DomainTools is a DNS-focused threat intelligence platform that maps internet infrastructure to help security teams detect, analyze, and block malicious domains before they cause damage. Founded in 2002, it serves SOC teams, incident responders, fraud prevention groups, and law enforcement, and integrates with platforms like CrowdStrike, Splunk, Microsoft Sentinel, and Cortex XSOAR. The company leans on more than 20 years of DNS intelligence and one of the largest passive DNS databases in the industry, with a predictive risk scoring approach that surfaces malicious domains earlier than standard blocklists.