URL / Domain Profile

🌐 https://x.com/ValenciaLeaks72

URL · host x.com · threat 0.50 (HIGH) · Ransomware Actors · GoDaddy.com, LLC
First seen 2026-08-06 13:13:02 · last seen 2026-08-06 13:13:02
🔄 Pivot:📁 Ransomware Actors

Threat score

0.50
MEDIUM

Sightings

1
1 sources

Subdomains (local)

0
from indicators

Related IPs

1
A/AAAA records

DNS records (local)

37
5 types

Reporting sources

1
0 enrichments
PIVOT🔖 URL Profile🔍 Advanced Search🕵 OSINT Pivot🔗 Link Analysis🕑 Timeline📤 Export STIX/MISP

📡 Reporting-source breakdown

Ransomware Actors
1
1 total source links on this indicator.

🏷 Tag breakdown (domain family)

url
1
auto-tagged
1
ransomware
1
medium-severity
1

📈 DNS record-type counts

TXT
22
NS
8
MX
5
SOA
1
A
1

📅 First-seen timeline (family)

2026-08
1

🏷 WHOIS / Registration (local cache)

RegistrarGoDaddy.com, LLC
Registrant OrgDomains By Proxy, LLC
CountryUS
Abuse Emailabuse@godaddy.com

🏷 Tags

ransomware url medium-severity auto-tagged
CategoryRansomware Actors
SeverityMEDIUM

📡 DNS Records

Stored (local dns_records) — 37

TypeValueTTLChecked
A 172.66.0.227 22 2026-08-08
MX alt2.aspmx.l.google.com 300 2026-08-08
MX aspmx.l.google.com 300 2026-08-08
MX alt1.aspmx.l.google.com 300 2026-08-08
MX alt4.aspmx.l.google.com 300 2026-08-08
MX alt3.aspmx.l.google.com 300 2026-08-08
NS b.u10.twtrdns.net 8258 2026-08-08
NS d.u10.twtrdns.net 8258 2026-08-08
NS a.r10.twtrdns.net 8258 2026-08-08
NS c.u10.twtrdns.net 8258 2026-08-08
NS a.u10.twtrdns.net 8258 2026-08-08
NS d.r10.twtrdns.net 8258 2026-08-08
NS c.r10.twtrdns.net 8258 2026-08-08
NS b.r10.twtrdns.net 8258 2026-08-08
SOA a.u10.twtrdns.net 300 2026-08-08
TXT google-site-verification=reUF-TgZq93ZGtzImw42sfYglI2hY0QiGRmfc4jeKbs 300 2026-08-08
TXT google-site-verification=F6u9mGL--d2lbLljvH3b1UUgXtevQPdcamKr9c8914A 300 2026-08-08
TXT adobe-idp-site-verification=ab4d9ce3473a73e81f46238da34ea4967fd5ac80e5c43fbfa8dff46d06a5321c 300 2026-08-08
TXT v=spf1 ip4:199.16.156.0/22 ip4:199.59.148.0/22 include:_spf.google.com include:_spf.salesforce.com include:_oerp.x.com include:phx1.rp.oracleemaildelivery.com include:iad1.rp.oracleemaildelivery.com -all 300 2026-08-08
TXT central-10416 300 2026-08-08
TXT stripe-verification=11AE5005048CF2B40BD2AC26DA89C512596CF727581C499E240549D95C37CEE0 300 2026-08-08
TXT 3089463 300 2026-08-08
TXT google-site-verification=rbRGYlOADDbtUYJTGd8GEDm0PwPZExviDSaSH4JLR8Q 300 2026-08-08
TXT apple-domain-verification=sEij6tJOW11fVNrG 300 2026-08-08
TXT atlassian-domain-verification=j6u0o1PTkobCXC84uEF/sWpIPtaZURBVYqKzmTvT8wugLcHT1vvrzzA63iP1qSLN 300 2026-08-08
TXT google-site-verification=8yQmoVhQedzlt36RPeQP41ytrEFk9aHEnde_xm0626g 300 2026-08-08
TXT shopify-verification-code=cUZazKrqCWgcshrcGvgfFR1lieuhRF 300 2026-08-08
TXT _w548xs1kfxtlqk3jyx19bzwk34c473i 300 2026-08-08
TXT google-site-verification=BT51mebIp7CbI7Qy_5Qg6LJLSBrLuCGQ_oznVAgfgKA 300 2026-08-08
TXT google-site-verification=isX7U92-gLht5aKvjaPvQ9tWaxoqREy8agpAOcqlfIE 300 2026-08-08
TXT stripe-verification=46F7B88485621DC18923B43D12E90E6CDBCE232F2FEBCF084E6EFA91F6BA707D 300 2026-08-08
TXT adobe-sign-verification=c693a744ee2d282a36a43e6e724c5ea 300 2026-08-08
TXT google-site-verification=lEZNYWieV7-UbDJafAm0u_RvNFb7GGqIYWAP4JmG5qs 300 2026-08-08
TXT atlassian-sending-domain-verification=bd424180-8645-4de5-bd6a-285479c7577a 300 2026-08-08
TXT slack-domain-verification=Csk4bjCPFnJaDLLaKFUwCTFuUpCVvnYlAm2Tba0i 300 2026-08-08
TXT figma-domain-verification=ee8420edd01965ba297f3438c907cfc6fbbaa1ee90a07b28f28bcfca8e6017bb-1729630998 300 2026-08-08
TXT kkdl3qb3tcrmdhfsm803p67r0my0svs8 300 2026-08-08

Live (DNS-over-HTTPS · optional augmentation)

TypeValueTTL
A 172.66.0.227 225
MX 10 alt3.aspmx.l.google.com. 300
MX 10 alt4.aspmx.l.google.com. 300
MX 1 aspmx.l.google.com. 300
MX 5 alt2.aspmx.l.google.com. 300
MX 5 alt1.aspmx.l.google.com. 300
NS d.r10.twtrdns.net. 10290
NS d.u10.twtrdns.net. 10290
NS c.r10.twtrdns.net. 10290
NS a.r10.twtrdns.net. 10290
NS c.u10.twtrdns.net. 10290
NS b.r10.twtrdns.net. 10290
NS b.u10.twtrdns.net. 10290
NS a.u10.twtrdns.net. 10290
TXT stripe-verification=46F7B88485621DC18923B43D12E90E6CDBCE232F2FEBCF084E6EFA91F6BA707D 298
TXT atlassian-sending-domain-verification=bd424180-8645-4de5-bd6a-285479c7577a 298
TXT stripe-verification=11AE5005048CF2B40BD2AC26DA89C512596CF727581C499E240549D95C37CEE0 298
TXT adobe-idp-site-verification=ab4d9ce3473a73e81f46238da34ea4967fd5ac80e5c43fbfa8dff46d06a5321c 298
TXT notion-domain-verification=BnCKbWESk142VKiGKHQ8PZkBfVoWYpsZxzl8Z95k0jB 298
TXT atlassian-domain-verification=j6u0o1PTkobCXC84uEF/sWpIPtaZURBVYqKzmTvT8wugLcHT1vvrzzA63iP1qSLN 298
TXT google-site-verification=rbRGYlOADDbtUYJTGd8GEDm0PwPZExviDSaSH4JLR8Q 298
TXT adobe-sign-verification=c693a744ee2d282a36a43e6e724c5ea 298
TXT apple-domain-verification=sEij6tJOW11fVNrG 298
TXT google-site-verification=BT51mebIp7CbI7Qy_5Qg6LJLSBrLuCGQ_oznVAgfgKA 298
TXT google-site-verification=8yQmoVhQedzlt36RPeQP41ytrEFk9aHEnde_xm0626g 298
TXT google-site-verification=lEZNYWieV7-UbDJafAm0u_RvNFb7GGqIYWAP4JmG5qs 298
TXT shopify-verification-code=cUZazKrqCWgcshrcGvgfFR1lieuhRF 298
TXT google-site-verification=F6u9mGL--d2lbLljvH3b1UUgXtevQPdcamKr9c8914A 298
TXT google-site-verification=reUF-TgZq93ZGtzImw42sfYglI2hY0QiGRmfc4jeKbs 298
TXT google-site-verification=isX7U92-gLht5aKvjaPvQ9tWaxoqREy8agpAOcqlfIE 298
TXT v=spf1 ip4:199.16.156.0/22 ip4:199.59.148.0/22 include:_spf.google.com include:_spf.salesforce.com include:_oerp.x.com include:phx1.rp.oracleemaildelivery.com include:iad1.rp.oracleemaildelivery.com -all 298
TXT 3089463 298
TXT kkdl3qb3tcrmdhfsm803p67r0my0svs8 298
TXT figma-domain-verification=ee8420edd01965ba297f3438c907cfc6fbbaa1ee90a07b28f28bcfca8e6017bb-1729630998 298
TXT _w548xs1kfxtlqk3jyx19bzwk34c473i 298
TXT slack-domain-verification=Csk4bjCPFnJaDLLaKFUwCTFuUpCVvnYlAm2Tba0i 298
TXT central-10416 298

🖥 Related IPs (1)

Resolved from local A/AAAA records (augmented with live DoH when reachable). Each pivots to its IP dossier.

172.66.0.227 →

🌐 Subdomains — local intel (0)

No subdomains of x.com in local intel. Check crt.sh ↗

📡 Reporting Sources (1)

MISP Galaxy RansomwareRansomware Actors

🌐 Same-ASN domains (0)

No ASN linkage in local intel.

🔍 OSINT pivots — external lookups

urlscan.io →VirusTotal →crt.sh (CT) →SecurityTrails →whois (who.is) →DNSDumpster →Shodan →Censys →GreyNoise →URLhaus →ThreatMiner →Web Archive →

🔗 Internal pivots & actions

Advanced Search →OSINT Pivot (30+) →Correlation graph →Link analysis →Passive DNS →DNS Audit →Timeline →Takedown draft →Export STIX/MISP →Add to case →

📁 Case Management

+ New case from this
Every panel resolves local-first: threat, category, first-seen & sightings from indicators; DNS from dns_records; WHOIS from whois_cache; subdomains via bounded suffix match on indicators; related IPs from A/AAAA records; tags, reporting sources and the link graph from the local relations. Live OTX pulses and DNS-over-HTTPS are optional augmentation and their absence never blanks the dossier.
← Domain / URL Index
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

⚡ AI Skills

All SkillsResolveEnrichCorrelateSummarize

🔍 Lookup & Enrich

EnrichmentsPivotLink Analysis

📚 Docs & Reports

DocumentationGenerate ReportAPIPlatforms Hub

💡 Recommendations

⚙ Automation

DNS audit batch

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php

📜 Playbook

Open Response Playbook

🔗 Related Tools

Passive DNSOSINTTakedown