DNS Resolution for Faster Threat Investigations
DNS resolution turns a hostname into infrastructure evidence. Learn how resolvers, caching, records, and passive DNS support threat detection at scale.
Read moreBlog
Insights on domain intelligence, threat detection, and cybersecurity research.
Malicious Registration Signals List for SOCs
Build a malicious registration signals list that prioritizes new domains, exposes phishing infrastructure, and improves alert triage at scale in hours.
Read moreWhen Do Domains Become Malicious? Signals That Matter
Learn when do domains become malicious, which signals change over time, and how security teams turn domain telemetry into timely detections at scale, fast.
Read moreBulk Security Telemetry Exports That Hold Up
Bulk security telemetry exports turn domain data into queryable evidence for detections, investigations, enrichment, and daily historical analysis at scale.
Read moreDomain Feeds vs Web Scraping for Threat Teams
Domain feeds vs web scraping: compare freshness, coverage, reliability, and operational cost for phishing detection and security intelligence teams now.
Read moreMaking Primitive Host Agent‑Ready: Implementing RFC 9728 for Our Domain Intelligence API
AI agents now act as the new crawlers for security teams, but they need a standard way to discover how to authenticate against protected APIs. Primitive Host implemented OAuth 2.0 Protected Resource Metadata (RFC 9728) so agents can automatically learn how to obtain tokens for our domain intelligence API instead of scraping docs or relying on hardcoded secrets.
Read moreHow to Identify Algorithmic Domains in DNS
Learn how to identify algorithmic domains using lexical, DNS, timing, and infrastructure signals that hold up in production threat detection pipelines.
Read moreDomain Telemetry for Faster Threat Detection
Domain telemetry gives security teams fresh, normalized signals for detecting phishing, mapping infrastructure, and enriching alerts before attacks spread.
Read moreIdentifying Suspicious Nameserver Changes
Identifying suspicious nameserver changes helps security teams expose phishing infrastructure, hijacks, and fast-moving campaign pivots early at scale.
Read moreHow to Monitor New Domain Registrations for Brand Abuse
Monitor new domain registrations for brand abuse: daily zone-file workflow to catch lookalikes, score phishing risk, and alert your SOC before blacklists.
Read more