Skip to content
SocialAtoZ

DomainTools

Verified

DNS and domain datasets for investigating infrastructure, with feeds and an MCP server

Brand Protection Software
–

Not yet rated. Be the first to review DomainTools.

Visit website Request pricing Write a review
DomainTools screenshot See all screenshots
  • Deployment Cloud Based, SaaS
  • Starting price Not published
  • Free trial Available
  • Best for Small Business, Medium Business, Large Enterprise

What is DomainTools?

DomainTools provides domain and DNS datasets for security investigations, delivered through an interface, an API, real-time threat intelligence feeds for domains and IPs, and an MCP server for connecting a language model to the data. It describes its holdings as the most comprehensive DNS datasets available and publishes technical, API and MCP documentation.

Selling data rather than a product is the distinction and it determines who this suits. An analyst investigating a phishing campaign needs to know who registered a domain, what else they registered, what infrastructure it resolves to and what else lives there. That is a research question answered by historical records, not by an alert, and the value lies in the depth of the archive rather than in any interface over it.

Historical depth is the part that cannot be replicated quickly. Attackers change infrastructure constantly, so what matters is what a domain looked like months ago, and only a provider that was recording then can answer.

The MCP server is a natural fit for this data. Infrastructure investigation is iterative questioning, which is precisely the shape of work an assistant handles well, provided the analyst still judges the conclusions.

Key Features of DomainTools

  • Domain and DNS datasets
  • Historical registration and infrastructure records
  • Real-time threat intelligence feeds for domains and IPs
  • Domain risk scoring
  • IP risk feeds
  • Investigation interface
  • API access
  • MCP server for language model access
  • Technical and API documentation
  • Integration into security workflows
  • Research and threat hunting support

DomainTools Pricing

Not published

Not published

Request pricing

No rate is published on the pages captured. Sold by product and data tier, priced on datasets, feeds and query volumes.

DomainTools Specifications

Deployment
  • Cloud Based
  • SaaS
Desktop
  • Web App
Built for
  • Small Business
  • Medium Business
  • Large Enterprise
Support
  • Email
  • Knowledge Base
Public API
Yes
Free trial
Yes
Free plan
No
Runs in browser
No
Customisable
No
Website
domaintools.com

DomainTools Screenshots

DomainTools screenshot 1

DomainTools Reviews

No reviews yet

Used DomainTools? Share your experience and help other buyers decide.

Write the first review

DomainTools FAQs

No rate is published on the pages captured. Access is sold by product and data tier, so pricing depends on which datasets, feeds and query volumes are taken.

An analyst needs to know who registered a domain, what else they registered and what infrastructure it resolves to. That is a research question answered by records, not by an alert.

Attackers change infrastructure constantly, so what matters is what a domain looked like months ago, and only a provider that was recording then can answer that.

Connecting a language model to the DNS datasets. Infrastructure investigation is iterative questioning, which suits an assistant, provided the analyst still judges the conclusions.

Through an investigation interface, an API, real-time feeds for domains and IPs, and the MCP server, with technical, API and MCP documentation published.