Predictive Risk Feeds

Predictive risk scoring and infrastructure profiling

Free DomainTools Information Kit

Get first-hand information and use cases to discover how DomainTools can empower your organization with the world’s largest DNS Dataset

Download Now

Leverage our daily predictive risk scoring feeds and gain a risk-based view of newly registered or updated hosts, IPs and domains.

Block domains before they’re weaponized

Respond faster

Build accurate predictive domain risk scoring into your new and existing workflows

Predictive Risk Scoring Feeds

We’ve done the hard work of tracking 97% of the internet for you.

THREAT INTEL FEED

Domain Risk Feed and Hotlist

Identify newly registered domains across the Internet for early awareness.

THREAT INTEL FEED

Hosting IP Risk Feed and Hotlist

About the DomainTools Risk Score

Drawing upon data points from more than 390 million current Internet domains, DomainTools Risk Score predicts how likely a domain is to be malicious, often before it is weaponized. The score comes from two distinct algorithms: Proximity and Threat Profile. Proximity evaluates the likelihood a domain may be part of an attack by analyzing how closely connected it is to other known-bad domains. Threat Profile leverages machine learning to model how closely a domain’s intrinsic properties resemble others used for spam, phishing, or malware.

DomainTools-Threat-Intelligence-Feeds-Predictive-Risk-Scoring-Feeds

Latest Updates

Using Iris Investigate Pivot Engine to Collect Bulk Screenshots | DomainTools

Originally published by DomainTools. See how you can use Iris Investigate to manually collect screenshots one domain at a time.

The Perfect Pair: Integrating DomainTools Data Sets in Microsoft’s Sentinel SIEM Product

Originally published by DomainTools. See how you can use Iris Investigate to manually collect screenshots one domain at a time.

Crypto Phishing and Credential Stealer Footprint Continues to Expand | DomainTools

Originally published by DomainTools. DomainTools research uncovers additional infrastructure related to recent malware campaigns targeting Windows & Android users.

Enhancing DNSDB to Better Handle DNS Wildcard Names | DomainTools

Originally published by DomainTools. This blog article explains how DomainTools is enhancing DNSDB to better handle wildcard DNS records.

The State of Threat Hunting | DomainTools

Originally published by DomainTools. In 2022, DomainTools, in partnership with Cybersecurity Insiders, conducted the fifth annual threat hunting survey to...

Stop Crypto Kleptos in Their Tracks | DomainTools

Originally published by DomainTools. DomainTools recent research illustrates that early detection of phishing campaigns and other malicious, brand-threatening behavior are...

SPM55: Ascending the Ranks of Indonesian Phishing As A Service Offerings | DomainTools

Originally published by DomainTools. Although SPM55 is a relative newcomer to the Indonesian cybercrime community, a marked uptick in activity...

{"slide_show":"3","slide_scroll":1,"dots":"false","arrows":"true","autoplay":"true","autoplay_interval":3000,"speed":600,"loop":"true","design":"design-2"}

LOGON is a pan-asian company operating in China, Hong Kong (HK), India, Singapore, Malaysia, Indonesia, Vietnam, Philippines and Thailand. LOGON has local dedicated trained product specialists in Hong Kong, Guangzhou, Kuala Lumpur, Mumbai and Bangalore. LOGON acts both as value added reseller and sole distributor for award winning software solutions. Customers can buy new licenses, purchase upgrades and renewals from any of our local offices. Contact us for first line support during evaluations, PoCs. We offer best practices consulting services and classroom & online training. Check our site for latest offers, special discounts, bundle deals, etc..