Stop responding to threats and start predicting them. 🛑 Find us at #RSAC to see how our new Real-Time Threat Feeds can help you identify malicious infrastructure before it’s weaponized.
Schedule a meeting with the DomainTools team in SF ⬇️
https://www.domaintools.com/events/rsac-2026
One last February note 💌
The latest Daniel Schwalbe newsletter is here, featuring the DTI team’s latest analysis! Read it here👇 https://dti.domaintools.com/newsletters/fourteen-newsletters-and-fifteen-winters
📰DTI’s latest research dives into the dev-ops of disinformation campaigns. Read our investigation into the Doppelgänger / RRN disinformation ecosystem here 👇https://dti.domaintools.com/research/doppelganger-rrn-disinformation-infrastructure-ecosystem
#Cybersecurity #Disinformation #InfoSec
From fake BTC “doublers” to wallet-draining presale sites, DTI uncovered a crypto scam network spanning ~250 domains impersonating public figures like Elon Musk and President Donald Trump.
Read the investigation ⬇️ dti.domaintools.com/securitysnac...
#Cybersecurity #Scams #Crypto #Infosec
🪷 The Petals of Espionage: DomainTools Investigations’ latest research analyzes the “who”, “how”, and “why” behind Lotus Blossom’s compromise of Notepad++.
Read the investigation: https://dti.domaintools.com/research/lotus-blossom-and-the-notepad-supply-chain-espionage-campaign
It’s Day # 2 of #AFCEAWest, and DomainTools Federal is here at the San Diego Convention Center. Stop by Booth # 2309 to talk to our team about how we give you the offensive edge against state sponsored adversaries.
#CyberDefense #ThreatHunting #Federal #DomainTools
DomainTools Federal is at #AFCEAWest at the San Diego Convention Center! Stop by Booth # 2309 to learn how we’re giving bad actors more bad days.
January has come to a close, which means Daniel Schwalbe's newsletter is live! Get caught up on all our DTI team has been up to this last month 👇https://dti.domaintools.com/newsletters/thirteen-silver-newsletters
#AFCEAWest is next week!
The DomainTools Federal Team will be at the San Diego Convention Center, Booth #2309. Book a meeting with our team here or stop our booth to learn how we can help you give bad actors more bad days!
www.domaintools.com/demo
Targeting the Talent: The Rise of "Phishing Interviews" 🎣
Job seekers are the latest target in scams uncovered by the DomainTools Investigations (DTI) team. Read our investigation here:https://dti.domaintools.com/securitysnacks/securitysnack-phishing-interviews
#CyberSecurity #Phishing #JobHunt
DomainTools will be at #AFCEAWest in San Diego from February 10-12.
Stop by our booth or book a meeting with our team to learn how we give defenders and threat hunters the offensive edge not just on land and in the air but across the sea as well.
https://www.domaintools.com/demo
Take control of your data with DomainTools integration with Cribl Stream ⚡
Create a Real-Time DomainTools data feed integration with Cribl Stream.
Learn more: https://www.domaintools.com/blog/domaintools-cribl-continuous-enrichment-for-enhanced-intelligence
Play to Win or Pay to Lose? 💰
Our team at DomainTools Investigations identified three massive infrastructure clusters of online gambling and real-money games targeting users across various regions. Learn more ⬇️
https://dti.domaintools.com/securitysnacks/pay-to-lose-dubious-online-gambling-games
Faster pivots. Smarter hunting🛡️
We’ve leveled up the DomainTools for CrowdStrike app to give threat hunters more context without ever leaving their workflow. Learn how to turn a single indicator into a full-scale infrastructure map ⬇️
https://www.youtube.com/watch?v=NEf4hMR6qo8
Introducing the new DomainTools 🔎
20+ years of DNS intelligence, now with a digital presence to match. We’ve evolved our look and feel for 2026 to ensure our platform is as precise and streamlined as our data.
New look. Same mission.
See what’s new: domaintools.com
The December DTI newsletter is here! ☕️
We’re kicking off 2026 with a recap of last month’s research and our monthly reading list. Read the full briefing: https://dti.domaintools.com/rainy-day-newsletter-12-but-not-35/
#Infosec #ThreatIntel #AI #CyberSecurity #APT35
DomainTools Investigations finds an attacker hijacking hotel accounts to send "verify booking" scams directly through official Booking[.]com messages.
Details: https://dti.domaintools.com/b2b2c-supply-chain-attack-hotels-booking-accounts-compromised-to-target-customers/
🐈⬛ In our latest research, DomainTools Investigations covers APT35’s financial model and the administration behind both Charming Kitten and Moses Staff.
https://dti.domaintools.com/the-apt35-dump-episode-4-leaking-the-backstage-pass-to-an-iranian-intelligence-operation/
Our Head of Investigations & CISO, Daniel Schwalbe, joined the CyberWire podcast for Research Saturday to discuss DomainTools Investigations’ GFW research.
Listen to the full interview⬇️
https://thecyberwire.com/podcasts/research-saturday/405/notes
#Cybersecurity #CyberWire #GreatFirewall #Podcast
In part IV of our series analyzing Chinese malware delivery domains, DTI researchers deployed #AgenticAI to analyze 1,900 domains tied to the supercluster we have been tracking since June. https://dti.domaintools.com/chinese-malware-delivery-domains-part-iv/
Don't miss this! DTI’s November newsletter covers research exposing two major nation-state operations:
🇨🇳 China's GFW and 🇮🇷 APT35 /Charming Kitten
https://www.linkedin.com/pulse/newsletter-11-could-take-forever-daniel-schwalbe-xy48c
#Cybersecurity #InfoSec #GreatFirewall #APT35 #China #Iran
😼 APT35/Charming Kitten Internal Documents Leaked
Our new DTI report analyzes the actor's methods.
Read the full analysis: https://dti.domaintools.com/threat-intelligence-report-apt35-internal-leak-of-hacking-campaigns-against-lebanon-kuwait-turkey-saudi-arabia-korea-and-domestic-iranian-targets/
Enterprise Strategy group found that customers can expect up to a 17 times return on their initial investment in their first year when integrating DomainTools products with their existing solutions.
Ready to learn more? Book with a demo with us here: https://www.domaintools.com/demo/
🌎 Geopolitics and the Global Reach of the GFW
Part 3 dives into the Geopolitical and Societal Ramifications, revealing how China projects digital control abroad.
🧵 Read the final report: https://dti.domaintools.com/inside-the-great-firewall-part-3-geopolitical-and-societal-ramifications/
Are your queries working as hard as they could be?
Using Iris Investigate + Farsight DNSDB in tandem gives you the fuller picture needed for better preventative decisions. Stop missing key pivots.
Read our latest blog post: https://bit.ly/3VzTr9V
Looking to get the most out of your year-end budget?
DomainTools integrations delivers best-in-class DNS intelligence directly into your security stack to enrich alerts, automate investigations, and enhance threat detection.
Request a demo today! https://www.domaintools.com/demo/
An independent study surveying DomainTools customers from Enterprise Strategy Group found DomainTools provided OEM partners 11 months faster time to value, reduced risk, and operational savings of 92%. Schedule a conversation with us here to learn more: https://www.domaintools.com/demo/
🧵DTI researchers leveraged the leaked data from China’s Great Firewall to map the core design of the censorship stack in Part 2 of Inside the Great Firewall.
Read the technical deep dive here: https://dti.domaintools.com/inside-the-great-firewall-part-2-technical-infrastructure/
DomainTools customers report wins from cost savings & improved detection rates, identifying up to 83% more malicious domains up to 96% faster with DomainTools than with industry-standard blocklist sources.
Set up a conversation with us to learn more: https://www.domaintools.com/domaintools-demo/
DomainTools integrations deliver critical DNS intelligence into your TIP, SIEM, SOAR, E/XDR, and LLM solutions to:
💡Enrich alerts
⚠️Get predictive Risk Scores
🔗Make infrastructure pivots
🔍Get instant Whois/RDAP data
Learn more: https://www.domaintools.com/demo/
