Skip to main content

Provider Information

Learn about security data providers supported by Domain Intel

Overview of provider​

A "provider" is a third party company who has partnered with Pangea to deliver their security capabilities, technology or data through a new or enhanced Pangea service.

Choose the provider​

Each provider cultivates data from different sources that yield different information. Some provider data sets and results may be more appropriate for your use case than others. Carefully assess each provider description and the associated use cases, then select the one that aligns most closely with your specific needs.

DomainTools​

DomainTools constantly monitors the internet and brings together the most comprehensive and trusted domain, website, and DNS data to provide immediate context and machine-learning driven risk analytics delivered in near real-time.

Use cases​

  1. Analyzing email domains for new user registrations to filter out malicious actors or spam
  2. Rejecting connections between your application and risky domains
  3. Controlling content containing high risk domains associated with threats

To learn more, visit the DomainTools website or their API Documentation .

CrowdStrike​

CrowdStrike Falcon is installed on over 25 million endpoints across 176 countries, collecting trillions of events per week. This data gives Crowdstrike the capacity to understand how the adversary is operating and is a principal reason why CrowdStrike has a unique advantage in threat intelligence.

To learn more, visit the CrowdStrike website.

Use cases​

  1. Protect against connections from domains known to be associated with malware
  2. Reject interaction with domains that have been detected as exfiltrating data

WhoisXML API​

WhoisXML API's service spans a vast number of active domains across an extensive range of top-level domains(TLDs). Get access to complete domain name footprints, which include ownership, timeline, updates, statuses, and other essential registration details for about every domain on the internet.

Use cases​

  1. Restrict users from domains based on domain age or location of registration
  2. Prevent connections or user registrations from unknown owners or known registered competitors

To learn more, visit the WhoIsXML API's website .

Select a provider as default​

Providers can be selected as default in the Pangea Console . Setting a provider as default in the Pangea Console means your API request calls will use this provider, unless another provider is specified as part of your API request.

To select a provider as default for an API:

  1. Go to the Pangea Console
  2. On the left-hand navigation menu, select Domain Intel
  3. Go to Settings
  • If you select Reputation then switch on Default for your preferred provider

Set provider as default

tip

You can also select a provider and override the default provider by specifying their name in the provider field when making an API request to the /reputation endpoint. This is helpful if your default provider returns a verdict of Unknown and you want a second opinion from another provider.

  • If you select WhoIs, the provider will be configured as WhoIs

Set provider as default

Was this article helpful?

Contact us