🌐 https://isovalent.com/blog/post/voidlink-cloud-malware-detection/
URL
· host
isovalent.com
· threat 0.50 (HIGH)
· Threat Actors First seen 2026-08-06 13:13:00 · last seen 2026-08-06 14:45:34
🔄 Pivot:📁 Threat Actors
Threat score
0.50
MEDIUM
Sightings
2
1 sources
Subdomains (local)
0
from indicators
Related IPs
1
A/AAAA records
DNS records (local)
0
0 types
Reporting sources
1
0 enrichments
📡 Reporting-source breakdown
1
1 total source links on this indicator.
🏷 Tag breakdown (domain family)
No data.
📈 DNS record-type counts
No data.
📅 First-seen timeline (family)
1
🏷 WHOIS / Registration (local cache)
No cached WHOIS for isovalent.com. Resolve & cache.
📡 DNS Records
Live (DNS-over-HTTPS · optional augmentation)
| Type | Value | TTL |
|---|---|---|
| A | 75.2.60.5 |
300 |
| MX | 5 alt2.aspmx.l.google.com. |
300 |
| MX | 10 aspmx3.googlemail.com. |
300 |
| MX | 5 alt1.aspmx.l.google.com. |
300 |
| MX | 1 aspmx.l.google.com. |
300 |
| MX | 10 aspmx2.googlemail.com. |
300 |
| NS | dakota.ns.cloudflare.com. |
21600 |
| NS | coco.ns.cloudflare.com. |
21600 |
| TXT | apple-domain-verification=7deoX0Ong50PsDZi |
300 |
| TXT | google-site-verification=Q-m7rgz8CKRQPd0r2GZcNqKeNABydySjIZDse1JxMrU |
300 |
| TXT | MS=ms17742557 |
300 |
| TXT | v=spf1 include:_spf.google.com include:mail.zendesk.com include:9197153.spf01.hubspotemail.net ~all |
300 |
| TXT | ZOOM_verify_NkpcXehILaz1CZJxqL9DtX |
300 |
| TXT | google-site-verification=wX399wo-t2xv1BJtOQ47bO3Wo7g7lRFPv4KLhgCeBJ4 |
300 |
| TXT | hubspot-domain-verification=N2NjMTZlOTQtMWQ2My00ZmE1LThlNzEtNTI0NGU3YzcwOGRl |
300 |
| TXT | google-site-verification=D4SmzD6QQ8QtuDBX0IRgoi3toApXfaTMxWvTeBvPJLI |
300 |
🖥 Related IPs (1)
Resolved from local A/AAAA records (augmented with live DoH when reachable). Each pivots to its IP dossier.
🌐 Subdomains — local intel (0)
No subdomains of isovalent.com in local intel. Check crt.sh ↗
📡 Reporting Sources (1)
MISP Galaxy Threat Actors | Threat Actors |
🌐 Same-ASN domains (0)
No ASN linkage in local intel.
🔍 OSINT pivots — external lookups
🔗 Internal pivots & actions
Every panel resolves local-first: threat, category, first-seen & sightings from
indicators; DNS from dns_records; WHOIS from whois_cache; subdomains via bounded suffix match on indicators; related IPs from A/AAAA records; tags, reporting sources and the link graph from the local relations. Live OTX pulses and DNS-over-HTTPS are optional augmentation and their absence never blanks the dossier.
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports
🤖 AI Copilot
⚡ AI Skills
🔍 Lookup & Enrich
📚 Docs & Reports
💡 Recommendations
- Audit DNS to build passive history
- Pivot resolved IPs to their dossiers
- Report phishing to registrar/host