Comprehensive Domain Intelligence for
Security Analysts &  Email Deliverability Teams

Global DNS, Mail Provider & Domain Risk Data — all in one API or cloud data‑share
273 M live domains tracked  |  1 minute updates  |  SOC 2 in‑progress
Contact Sales
🛡️
Domain Risk
Phishing, Malware, Disposable and Parked domains tagged
🏷️
TLD Info
Country,  ISP Location
📍
IP Info
Geolocation, ASN, ISP identified
✉️
Mail Server
MX Records matched to Mailbox Providers and Domain Risk
🖥️
DNS Records
Authoritative NS records & SOA
Authentication
SPF, DKIM, DMARC & BIMI Status

Check out our data

Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.

Why Datazag

Built for

  • Security analysts & SOC teams – enrich SIEM alerts in real‑time.
  • Deliverability & ESP platforms – keep sender scores high.
  • KYC / KYB  teams – instantly screen domains for risk.
  • Fraud & Ad‑tech engineers – filter bots and junk traffic at ingest.

What makes us different

  • 90 % global coverage – 273 M live domains (excluding deactivated domains), refreshed every minute
  • Out‑of‑the‑box risk verdicts – phishing, malware, parked & disposable flags so you act, not sift.
  • Trusted security – AES‑256 at rest, SOC 2 Type I in‑progress, EU/US data residency options.
  • Plug into your applications - Available via API, cloud shares with all major platforms and on premise DB

Unveiling the hidden layers
of Domain Intelligence

1
Collect

Our distributed, global crawler diligently ingests DNS records for every active TLD, identifying and adding 200–500k new domains to our dataset each day.

2
Enrich

Leveraging advanced machine‑learning models, we tag domains with crucial context: identifying phishing, malware, disposable, and parked domains, and precisely mapping MX records to over 63k mailbox providers worldwide.

3
Deliver

Access the intelligence seamlessly. Query specific domains via our low‑latency REST API, stream real‑time delta files directly to your S3 bucket, or read the complete, live dataset natively inside your Snowflake or BigQuery data warehouse.

4
Act

Automatically enrich SIEM alerts for faster investigations, proactively block Business Email Compromise (BEC) attempts at your MTA, or cleanse customer email lists within your CDP to improve deliverability and reduce fraud.

What this process delivers

GC

Global Coverage

Over 270M domains updated, daily, with full DNS records and custom claasifications, representing over 90% of public facing worldwide domains.

MS

Mailbox Segmentation

MX records matched to mailbox provider. Mailbox providers classified by organization type, including bad actors or other high risk mail boxes.

DR

Domain Risk Classification

Identifies high risk domains and fraudulent email sources, including phishing, Malware, Disposable, Parked, New, country based and other high risk domains.

ES

Email Security

DNS data, includes SPF, DKIM, DMARC records. SPF blocks are flagged.
Mail server domains are checked for MTA -STS implementation

KC

Know Your Customer

Use our API or Database to identify risky signups on new or existing subscribers. Our real time KYC checks include IP address country, domain risk and other flags to enable your own risk evaluation.

BD

Webmail classification

Mailbox providers segmented by B2C and B2B. Webmail domains classified for global, regional and local country providers.

What this process delivers?

A competitive edge with holistic domain intelligence.

Unparalleled Coverage

Go beyond traditional threat feeds. Our constant crawl ensures you see 90 % of all public domains, including obscure and newly registered ones often missed by others.

Actionable Context

Transform raw DNS data into intelligence. Get critical flags (phishing, malware, parked), understand the true mailbox provider behind an MX record, and gain geo/IP insights vital for decision making.

Flexible Deployment

Whether you prefer a REST API for real‑time lookups or a direct data-share into your cloud data warehouse (Snowflake, AWS Data Exchange), Datazag adds value to your existing workflows seamlessly.

Expert Support

Our team have both technical, cyber security and marketing professional experts who can support you with design or implementations using our data.

Continous Development

Automated data collection is augmented by AI and human research, We are always looking at new requirements and data sources to add extra intelligence.

Lower cost

Our mission is provide top quality data at a price that encourages adoption, together with a service that is second to none.

Use Cases

Security & Threat Intelligence

Prioritise IOCs: “domain registered 3 days ago, tagged phishing → escalate”

Email Deliverability

Strip parked or disposable domains, analyse mailbox‑provider mix, boost inbox rates.

Fraud & Ad-tech

Remove junk traffic and fake sign‑ups by scoring domains at ingest.

Data Platforms

Analysts query zag.domains directly in Snowflake; pay by rows scanned.

Pricing

Developer

$99 /Month
For individuals & small projects getting started.
  • API Access
  • Basic Data Enrichment
  • Community Support
  • Rate Limited

Developer

$99 /Month
For individuals & small projects getting started.
  • API Access
  • Basic Data Enrichment
  • Community Support
  • Rate Limited

Developer

$99 /Month
For individuals & small projects getting started.
  • API Access
  • Basic Data Enrichment
  • Community Support
  • Rate Limited

Ready to to see your domains differently?

Get Free API Key  or  Talk to an Expert

Your Challenge

Datazag Advantage

Coverage

Threat intelligence feeds lack the latest data

90% of all public & live domains
New domains added daily – typically 200-500k
domains
Domains checked and updated every minute

Context

Raw DNS data without any business meaning

MX – Mailbox Provider mapping intelligence plus trusted provider flag
Domains - phishing / malware / parked / new domain flags
IPs - Geo & ISP designations

Speed

Need to know if a domain is safe now

New domains  added daily. Unknown domains  updated within 60 minutes.

Flexibility

APIs don’t fit your workflows

Plugs into any SIEM or MTA without heavyweight portal lock-in