OSINT NavigatorDE Deutsch

DomainTools

Operator: DomainTools LLC, United States

Domain research with historical registration data, passive DNS, infrastructure connections and risk assessments.

Technical Infrastructure

Open website

Product

DomainTools with Iris Investigate for domain research. DNSDB, Iris Enrich/Detect and traditional lookup tools have separate product access.

Availability and source date

Active

As of: 16 October 2026.

No functionality test has been performed.

Use in OSINT research

Shows current and historical registration and infrastructure data for a domain. IP or email addresses help find related domains.

Queries

InputResultResult type
Domain / websiteDomain profile with WHOIS/RDAP, DNS, hosting history and certificates; scope depends on product access.
Retrieved
IP addressDomains linked through IP and infrastructure characteristics.
Retrieved
Email addressDomains containing the email address in collected current or historical registration data. Historical matches may no longer apply.
Retrieved

Features

  • Shows current and historical WHOIS/RDAP records.
  • Links domains through shared IPs, nameservers and registration details.
  • Searches passive DNS data with timestamps.
  • Assesses domain risks using its own models.
  • Provides data through APIs, a Python client and MCP.

Categories

  • Technical Infrastructure
  • Domains & WHOIS
  • DNS

Coverage

Geographical coverage

Worldwide

Dataset

WHOIS/RDAP history, passive DNS observations, and hosting and certificate data. DNSDB uses global sensor networks; data scope and access vary by product.

Access

Installation and deployment

Website · Locally installable

DomainTools operates the data platform and MCP. An optional local Python client with a command line accesses the APIs; it does not provide self-hosting of the database.

Requirements

Iris Investigate requires enterprise access set up by the organisation. API keys and contractual scope determine API/MCP access. A demo is available through sales.

Export

Structured API responses through the API or Python client. Iris supports reports and teamwork.

Provider

DomainTools LLC

Country of establishment

United States

Interfaces

API

Available. API access with a key; scope and allowances depend on the plan.

MCP

Available. Hosted MCP at api.domaintools.com/v1/mcp with a DomainTools key; tools for Iris, DNSDB and domain history.

AI agents

Available. MCP integration for compatible AI clients.

Usage note

The general terms restrict use to personal or internal purposes; conflicting enterprise agreements take precedence.

Registration data may contain personal information. Processing it requires an appropriate legal basis.

Limitations

  • Historical results may be based on former registration details that are no longer valid.
  • Iris Investigate, DNSDB and traditional WHOIS tools have separate access arrangements and data scopes.
  • Risk scores are model estimates, not proof of malicious activity.

Guides and practical reports

Sources

Report an error