(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start': new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0], j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src= 'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f); })(window,document,'script','dataLayer','GTM-WRBNM36X'); (function(ss,ex){ window.ldfdr=window.ldfdr||function(){(ldfdr._q=ldfdr._q||[]).push([].slice.call(arguments));}; (function(d,s){ fs=d.getElementsByTagName(s)[0]; function ce(src){ var cs=d.createElement(s); cs.src=src; cs.async=1; fs.parentNode.insertBefore(cs,fs); }; ce('https://sc.lfeeder.com/lftracker_v1_'+ss+(ex?'_'+ex:'')+'.js'); })(document,'script'); })('bElvO7322MM8ZMqj');
TheHive enters a new era with TheHive Flow, its native orchestration and automation layer! 
TheHive enters a new era with TheHive Flow, its native orchestration and automation layer! 
EN
Request a demo
EN
See all integrations

DomainTools

Domain and DNS intelligence platform for investigating domain ownership, infrastructure, and threat actor attribution
Threat Intelligence
10 Analyzers
domaintools.com GitHub

Analyzers (10)

Enrich observables with intelligence

DomainTools WhoisLookup v2.0

Use DomainTools to get the ownership record for a domain or an IP address with basic registration details parsed.

  • Author: CERT-BDF
  • License: AGPL-V3
  • Data Types: domain, ip

DomainTools WhoisHistory v2.0

Use DomainTools to get a list of historical Whois records associated with a domain name.

  • Author: CERT-BDF
  • License: AGPL-V3
  • Data Types: domain

DomainTools ReverseNameServer v2.0

Use DomainTools to get a list of domain names that share the same primary or secondary name server.

  • Author: CERT-BDF
  • License: AGPL-V3
  • Data Types: domain

DomainTools ReverseIPWhois v2.0

Use DomainTools to get a list of IP addresses which share the same registrant information.

  • Author: ANSSI
  • License: AGPL-V3
  • Data Types: mail, ip, domain, other

DomainTools WhoisLookupUnparsed v2.0

Use DomainTools to get the ownership record for an IP address or a domain without parsing.

  • Author: CERT-BDF
  • License: AGPL-V3
  • Data Types: ip, domain

DomainTools ReverseIP v2.0

Use DomainTools to get a list of domain names sharing the same IP address.

  • Author: CERT-BDF
  • License: AGPL-V3
  • Data Types: ip, domain, fqdn

DomainTools HostingHistory v2.0

Use DomainTools to get a list of historical registrant, name servers and IP addresses for a domain name.

  • Author: ANSSI
  • License: AGPL-V3
  • Data Types: domain

DomainTools Risk v2.0

Use DomainTools to get a risk score and evidence details on a domain or fqdn

  • Author: CERT-BDF
  • License: AGPL-V3
  • Data Types: domain, fqdn

DomainTools ReverseWhois v2.0

Use DomainTools to get a list of domain names which share the same registrant information.

  • Author: CERT-BDF
  • License: AGPL-V3
  • Data Types: mail, ip, domain, other

DomainTools Reputation v2.0

Use DomainTools to get a reputation score on a domain or fqdn

  • Author: CERT-BDF
  • License: AGPL-V3
  • Data Types: domain, fqdn
CrowdStrike Falcon
Splunk
VirusTotal
Microsoft Defender for Endpoint
Microsoft Entra ID
Microsoft Sentinel
MISP
Google Threat Intelligence
Recorded Future
Microsoft Defender for Office 365
Proofpoint
Shodan
Slack
AbuseIPDB
Cloudflare
URLScan.io
URLhaus
ONYPHE
YARA
CAPA
Telegram
Apache Kafka
Mattermost
Microsoft Teams
Redis
Abuse Finder
AIL Onion-Lookup
Airtable
AlienVault OTX
Ansible AWX
ANY.RUN
AWS Lambda
Axur
BackscatterIO
BinalyzeAIR
Censys
CERT.AT pDNS
ChainAbuse
CheckPhish
CheckPoint
Check Point Harmony Email & Collaboration
CIRCL Hash Lookup
CIRCL Passive DNS
CIRCL Passive SSL
CIRCL Vulnerability-Lookup
Cisco Duo
Cisco Secure Endpoint (Formerly AMP for Endpoints)
CiscoThreatGrid
CiscoThreatResponse
Cisco Umbrella
Cisco Umbrella Investigate
CISMCAP
ClamAV
Cluster25
ClusterHawk
CrowdSec
Crtsh
Cuckoo Sandbox
CyberChef
Cyberprotect
Cylance
DNS-RPZ
DNSDB
DNSdumpster
DNSLookingglass
DNSSinkhole
Domain Mail SPF DMARC
DomainTools Iris
DShield
EchoTrail
EclecticIQ
Elasticsearch
EmailRep
EmergingThreats
EmlParser
FileInfo
FireEye iSIGHT
FireHOL
Forcepoint WebsensePing
FoxIO
Gatewatcher CTI
Gmail
GoogleDNS
Google Safe Browsing
Google Vision API
GreyNoise
GRR Rapid Response
HarfangLab
Hashdd
Have I Been Pwned
Hunter.io
Hybrid Analysis
IBM QRadar
IBM X-Force
Inoitsu
IntezerCommunity
IP-API
IPinfo
IPVoid
isMalicious
IVRE
JAMFProtect
Jira Cloud
Joe Sandbox
Jupyter
Kaspersky TIP
KnowBe4
LdapQuery
Lookyloo
LupovisProwl
Macadress
Mailer
MailIncidentStatus
Malpedia
Maltiverse
MalwareBazaar
MalwareClustering
Malware Hash Registry (MHR)
Malwares
MaxMind
MetaDefender
Microsoft Exchange Online
MISP Warning Lists
Mnemonic Passive DNS
MsgParser
MSRiskIQPassiveTotal
n8n
NERD
Nessus
Netcraft
NSRL
Okta
ONYPHEActiveScan
OpenCTI
OpenCVE
OrionMalware
OVHcloud
Palo Alto AutoFocus
PAN Cortex XDR
PAN Cortex XSOAR
PAN Next Generation Firewall
PAN WildFire
Patrowl
PDFPreview
PhishingInitiative
PhishTank
Pulsedive
QrDecode
Rapid7 InsightConnect
RDAP
Redmine
Request Tracker (RT4)
Robtex
ScanMalware
SecurityTrails
SEKOIA Intelligence Center
SendGrid
SentinelOne
ServiceNow
Shuffle
SinkDB
SophosIntelix
SpamAssassin
SpamhausDBL
StamusNetworks
StopForumSpam
Suspicious
ThreatConnect
ThreatFox
ThreatMiner
ThreatQ
Thunderstorm
Tines
TorBlutmagie
TorProject
Triage
UnshortenLink
urlDNA.io
Valhalla
ValidateObservable
Velociraptor
Verifalia
VirusShare
VMRay
Vulners
Watcher
Wazuh
WOT
XposedOrNot
Yeti
ZEROFOX
Zscaler
See how TheHive can help your team
Thousands of analysts worldwide rely on our platform to manage security incidents more efficiently than ever.
See what the buzz is about: