Who We Are

DomainTools Investigations (DTI) is a research program focused on preventing, mitigating, and investigating domain and DNS-based threats. 

Through DTI, the cybersecurity community has access to:

  • Insights on advanced persistent threats (APTs), nation-state activity, malware, phishing campaigns, and more. 
  • Published research and indicators of compromise on the DTI website and available via webinars, closed door sessions, and conferences.
  • Newsletters and reading lists curated for our community, focused on cutting edge research from our team and our friends in the industry.

DTI was formed as a community-based research effort at:

DomainTools

This project is an initiative by us, for us: the researchers, analysts, and defenders who work behind the scenes to make the Internet a safer place. Since our launch on January 9th, 2025, our team has had one goal and one goal only – to provide relevant, timely, and (most importantly) truly useful research to practitioners.

PS: Let’s talk about tracking! 

As security and privacy professionals, we are about as allergic to tracking as one can be. However, the bargain we made with our bosses was to sign up for some KPIs, and we need some kind of measurement to see if we hit those KPIs. We use Google Analytics with tags, and Marketo Measure (Bizible / Adobe). We won’t gate content, and we won’t use more invasive tracking.

We know tracking on websites can be blocked by the browser, and almost every email client now has the ability to block open tracking. But if you feel so inclined and want to support our program, maybe consider letting some of that tracking through.