DomainTools Organic Growth Opportunities

Create a massive library of risk-assessment pages that answer whether a specific domain is safe, legitimate, or a potential scam. These pages move beyond basic WHOIS data to provide a comprehensive security 'scorecard' for the general public and security researchers alike.

Example Keywords

• is [domain] legit
• [domain] safety check
• [domain] scam or real
• reputation of [domain]
• is [domain] a phishing site

Rationale

There is a massive search volume for users trying to verify the legitimacy of websites before interacting with them. By providing a data-backed reputation profile, DomainTools can capture high-intent traffic from users who are currently underserved by generic WHOIS lookups.

Topical Authority

DomainTools is already the global leader in internet intelligence; providing a risk score is a natural extension of its existing domain-mapping expertise and authority score of 55.

Internal Data Sources

Leverage internal risk scores, hosting history, screenshot history, and DTI (DomainTools Investigations) research to provide a unique, authoritative narrative for each domain.

Estimated Number of Pages

500,000+ (Targeting high-traffic and newly registered domains)

Develop a directory of pages dedicated to protecting major global brands by listing and analyzing observed lookalike and typosquatted domains. These pages help security teams and consumers identify fraudulent sites targeting specific companies.

Example Keywords

• fake [brand] website
• [brand] phishing domains
• [brand] official domains list
• how to spot [brand] scams
• [brand] typosquatting examples

Rationale

Brands and their customers are constantly targeted by impersonation attacks. Creating a centralized hub for each brand's 'domain neighborhood' attracts enterprise security buyers looking for brand protection solutions.

Topical Authority

DomainTools' Iris Detect and domain discovery tools provide the exact technical foundation needed to credibly identify and categorize these threats at scale.

Internal Data Sources

Use Iris Detect discovery outputs, typosquatting pattern generation, and DTI campaign research to populate these pages with real-time threat data.

Estimated Number of Pages

50,000+ (Covering top global brands, financial institutions, and SaaS providers)

Generate technical intelligence pages for every Autonomous System Number (ASN) and major IP prefix to summarize network-level reputation and activity. These pages serve as a reference for network engineers and threat hunters investigating infrastructure-level threats.

Example Keywords

• AS[number] reputation
• who owns ASN [number]
• malicious activity on AS[number]
• ISP [name] network security
• ASN [number] threat intelligence

Rationale

Threat hunters often pivot from a single domain to the broader network it resides on. Providing detailed ASN-level intelligence captures technical search traffic that is currently fragmented across low-quality directory sites.

Topical Authority

Mapping the internet's infrastructure is core to the DomainTools mission, and the brand's existing DNS-focused datasets provide an 'unfair advantage' in this space.

Internal Data Sources

Utilize Passive DNS (DNSDB) aggregates, ASN history, and DailyChanges telemetry to show network churn and security spikes.

Estimated Number of Pages

20,000+ (Covering all active ASNs and high-interest IP ranges)

Build a comprehensive library of pages that index and analyze the subdomains and hostnames associated with major apex domains. This provides a 'map' of a company's external attack surface for security researchers and bug hunters.

Example Keywords

• subdomains of [domain]
• [domain] hostname list
• find hidden subdomains for [domain]
• api.[domain] dns history
• dev.[domain] infrastructure

Rationale

Security professionals and researchers frequently search for subdomains to understand an organization's digital footprint. This play targets a highly technical audience that is a primary buyer for DomainTools' enterprise suite.

Topical Authority

With access to one of the world's largest Passive DNS datasets, DomainTools can provide more accurate and historical hostname data than any other platform.

Internal Data Sources

Feed the LLM with Farsight DNSDB records, Newly Observed Hostnames (NOH) feeds, and historical RRset data to create detailed infrastructure timelines.

Estimated Number of Pages

1,000,000+ (Scaling across the most searched apex domains globally)

Create detailed historical logs for specific DNS record types (MX, NS, TXT) for millions of domains, explaining the significance of infrastructure shifts over time. These pages help analysts identify when a domain was 'weaponized' or moved to a new provider.

Example Keywords

• [domain] nameserver history
• [domain] mx record history
• [domain] txt record changes
• historical dns for [domain]
• when did [domain] change hosting

Rationale

Historical DNS data is a critical component of incident response. By indexing these changes as static, searchable content, DomainTools can capture traffic from investigators looking for specific historical events.

Topical Authority

The DailyChanges platform is a unique first-party asset that gives DomainTools a significant lead in tracking internet-wide DNS movements.

Internal Data Sources

Use the DailyChanges event stream, historical nameserver data, and SPF/DMARC record history to provide a narrative of a domain's technical evolution.

Estimated Number of Pages

600,000+ (Focusing on domains with frequent infrastructure changes)

Improvements Summary

Expand the WHOIS Lookup, WHOIS History, and Reverse IP pages from thin tools into “tool + answer” pages by adding 700–1,200 words of indexable sections, FAQs with schema, and clearer on-page structure. Improve CTR with rewritten title tags/meta descriptions and strengthen internal linking so the cluster funnels authority into the three primary pages.

Improvements Details

Add server-rendered explanatory blocks below each tool: definitions, 3–5 usage steps, security use cases, and “related lookups” links; add FAQPage schema plus SoftwareApplication/WebApplication markup where relevant. Rewrite titles/metas to target non-branded intent (e.g., "whois history", "domain ownership history", "reverse IP lookup", "ip to domain") and add TOCs/jump links on guide-style pages. Build 3–5 supporting guides (WHOIS lookup guide, WHOIS history step-by-step, reverse IP guide, comparisons like Passive DNS vs WHOIS) and link them contextually to the tools while separating landing pages for Reverse WHOIS and domain monitoring to prevent keyword cannibalization.

Improvements Rationale

The dataset shows strong brand demand but under-captured non-branded, high-intent queries, with WHOIS History sitting closest to page-1 rankings and several terms carrying high CPC. Tool-only pages often fail to match informational intent, so adding indexable explanations, FAQs, and snippet-ready definitions can improve relevance and SERP features, while better titles/metas raise CTR. A tighter internal linking cluster and dedicated pages for overlapping intents help rankings without competing against your own pages.