Overview

DomainTools Monitors is a suite of proactive monitoring tools designed to provide early detection of potential cyber threats by tracking changes in domain-related data. Built upon DomainTools' extensive database of domain and DNS profile information, these tools enable security teams to receive alerts when adversaries are in the preparatory phases of an intrusion or when a known campaign evolves.

Features and Capabilities

• Registrant Monitor:
  • Monitors various parameters in Whois records.
  • Sends email alerts when domains tied to monitored registrant terms undergo changes, including new registrations, ownership changes, or deletions.
  • Provides a dashboard displaying records of these changes for easy reference.
• IP Monitor:
  • Alerts when domains are pointed to or away from the monitored IP address.
  • Tracks hosting changes for new, existing, and deleted domains.
  • Includes a dashboard displaying records of these changes for easy reference.
• Name Server Monitor:
  • Notifies when the server resolves new domains or drops existing ones.
  • Covers all core generic TLDs, all new gTLDs, and many country code TLDs (ccTLDs).
  • Offers a dashboard displaying records of these changes for easy reference.
• Brand Monitor:
  • Monitors domains containing specific words, phrases, or partial words.
  • Covers all core generic TLDs, all new gTLDs, and many ccTLDs.
  • Sends email alerts when domains tied to the monitored terms are registered or dropped.
  • Displays records of these changes on a dashboard for easy reference.
• Domain Monitor:
  • Tracks domains in .com, .org, .net, .info, .biz, and .us for impending expiration or status changes.
  • Sends email alerts when monitored domains are approaching expiration or when other parameters such as registrar or domain status change.
  • Allows organization of monitored domains into portfolios and quick review of Whois records and domain availability in other TLDs.