Skip to content

DomainTools Technical Documentation

Welcome! Please send your content or feature requests to your DomainTools counterpart or via enterprisesupport@domaintools.com.

APIs + SDKs

Dive into our APIs, including Iris, DNSDB, Lookups, and Monitors. Find references, guides, and OpenAPI specs.

Explore APIs »

Farsight DNSDB

Access the world's largest real-time passive DNS database. Learn about Scout, Export, and advanced search.

Learn about DNSDB »

Farsight SIE

Receive real-time passive DNS feeds from the global sensor network for threat detection and analysis.

Explore SIE »

Integrations

Connect DomainTools data to your SIEM, SOAR, and TIP platforms like Splunk, Sentinel, and XSOAR.

View All Integrations »

Iris Platform

Explore the Iris investigation, enrichment, and detection platform. Pivot through connected infrastructure.

Investigate with Iris »

Lookup and Monitor

Access classic lookup and monitoring tools for domain research, WHOIS data, and infrastructure tracking.

Use Lookup Tools »

Risk Score

Assess domain risk with machine learning classifiers for malware, phishing, spam detection, and proximity scoring.

Learn about Risk Score »

Threat Feeds

Consume real-time and daily feeds of malicious infrastructure directly into your security tools.

Get Feed Details »

User Management

Learn how to manage users, groups, and other account settings for your organization.

Manage Your Account »