URL / Domain Profile

🌐 keysight.com

DOMAIN · host keysight.com · threat 0.50 (HIGH) · Ransomware
First seen 2026-08-06 13:12:26 · last seen 2026-08-06 14:48:14
🔄 Pivot:📁 Ransomware

Threat score

0.50
MEDIUM

Sightings

3
2 sources

Subdomains (local)

0
from indicators

Related IPs

2
A/AAAA records

DNS records (local)

0
0 types

Reporting sources

2
0 enrichments
PIVOT🌐 Domain Profile🔍 Advanced Search🕵 OSINT Pivot🔗 Link Analysis🕑 Timeline📤 Export STIX/MISP

📡 Reporting-source breakdown

Ransomware
2
2 total source links on this indicator.

🏷 Tag breakdown (domain family)

medium-severity
1
ransomware
1
auto-tagged
1

📈 DNS record-type counts

No data.

📅 First-seen timeline (family)

2026-08
1

🏷 WHOIS / Registration (local cache)

No cached WHOIS for keysight.com. Resolve & cache.

🏷 Tags

ransomware medium-severity auto-tagged
CategoryRansomware
SeverityMEDIUM

📡 DNS Records

Live (DNS-over-HTTPS · optional augmentation)

TypeValueTTL
A 52.27.67.200 3600
A 35.84.52.255 3600
MX 10 mxb-003cac01.gslb.pphosted.com. 3150
MX 10 mxa-003cac01.gslb.pphosted.com. 3150
NS ns3.keysight.com. 3533
NS pdns111.ultradns.net. 3533
NS pdns111.ultradns.biz. 3533
NS pdns111.ultradns.org. 3533
NS pdns111.ultradns.com. 3533
TXT MS=ms93691955 3600
TXT smartsheet-site-validation=yBV7GQJcHv9l2P41xObWNEIs-H1j4ZI8 3600
TXT gitlab-pages-verification-code=e339c91ac8b05ea35b7bc74f378e0f95 3600
TXT atlassian-domain-verification=tgnIXfKjDjq4HDIfXEHOkfHQt9ncNp2DN60DzGLi0CS6d9TFaAr7uJT9rENB4smB 3600
TXT MS=ms13448721 3600
TXT amazonses:fqYcsLMBB7uXbWf2li+zPHhlKHvwYusVv1weGcOxb5U= 3600
TXT v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com include:_spf.salesforce.com include:spf_c.oraclecloud.com include:_spf.concurcompleat.com include:mail.zendesk.com ip4:72.249.160.11 ip4:72.249.160.12 ip4:124.251.39.112 ip4:74.91.87.142 ip4:74.91.87.143 ip4:85.90.243.194 ip4:205.220.161.93 ip4:205.220.173.93 ip4:72.142.145.120 ip4:72.142.145.122/31 ip4:3.213.113.143 ip4:3.216.209.198/31 ip4:54.190.231.54/31 ip4:192.25.5.26 ip4:192.25.5.28 ip4:192.25.5.27 ip4:192.25.5.18 ip4:23.251.224.0/19 ip4:192.25.21.159 ip4:192.25.21.162 ip4:192.25.21.164 ip4:205.219.85.0/24 ip4:192.40.160.0/19 ip4:69.12.214.194 ip4:74.217.219.32 ip4:206.127.27.11 ip4:188.172.128.0/20 ip4:216.198.0.0/18 ip4:165.72.200.0/24 ip4:199.40.206.0/26 ip4:72.3.205.12 ip4:64.238.211.94 ip4:173.236.20.0/24 ip4:192.92.97.0/24 ip4:52.128.40.0/21 ip4:217.8.118.0/24 ip4:103.229.233.0/24 include:spf.protection.outlook.com include:docebosaas.com ~all 3600
TXT adobe-sign-verification=70d890733fd83f916971623a7d24b79 3600
TXT anthropic-domain-verification-b5gvk3=OlkFb8HVfTU5A332wMpIFjdQS 3600
TXT cursor-domain-verification-gr8bt2=gRt3NvnSbdPIawBW7eUjcFiTn 3600
TXT atlassian-domain-verification=DFuXazCAA8Fn3e0Hj8A6b6uRTmbiI8leK5wsNjiVWnNIaGaD8S3y4dDYmcdhgBXy 3600
TXT MS=ms75418395 3600
TXT teamviewer-sso-verification=d117f49c45d04cc18af1211ba7580bd9 3600
TXT 855f4579-c145-44c9-aba6-e7f348313f2c 3600
TXT MS=ms22695472 3600
TXT infoblox-domain-mastery=b533d19df0c61b133f276fcf038522a29a6a3afa781e016eab4c9d3e3a46066d05 3600
TXT _gitlab-pages-verification-code.keysight.com=gitlab-pages-verification-code=803565d0fe066afa3b679c0ed2721b8a 3600
TXT apple-domain-verification=ELoDVs9vbXXP199x 3600
TXT ciscocidomainverification=4d0f15d232a422bbd1a559d676eed62a0115a1ea774c10478cc31599362fb26 3600
TXT google-site-verification=revPDyva9oPIdsxYVRQZ2D-BO7EORp1fLB4i-cvJDA8 3600
TXT MS=ms74425658 3600
TXT WReU/11y4qCdOlF76HR5ex31LYLUtO6zzIlolbcnZg+WvqLiKBcpZ45IDFA2CO8SXBGhSeuVIfpt2XnM/0fwug== 3600
TXT cisco-ci-domain-verification=44abc3e8f9d675c913b6104d15eb2c8097427fa53dcae4d215ce8d342b71ddd1 3600
TXT openai-domain-verification=dv-3NZmsuxJV5DdY5gFNM9LubOj 3600
TXT atlassian-domain-verification=AGiDFptwa/OUoEDrGU08jejEUsHm7/m5WFaG8l5no8AL9mWFhHLCHWI7VCrrIGkm 3600
TXT adobe-sign-verification=ec426ad795f23c2aea176e633561ab8 3600
TXT google-gws-recovery-domain-verification=57468945 3600
TXT atlassian-domain-verification=ik5bWbd2FTDgjL8zl75T9S/Rj5CgkVuO2uEmczNv98bpBirVvG9/sfGa24WDzZzx 3600

🖥 Related IPs (2)

Resolved from local A/AAAA records (augmented with live DoH when reachable). Each pivots to its IP dossier.

52.27.67.200 → 35.84.52.255 →

🌐 Subdomains — local intel (0)

No subdomains of keysight.com in local intel. Check crt.sh ↗

📡 Reporting Sources (2)

Ransomware.live recent victimsRansomware
Ransomware.live recentvictimsRansomware

🌐 Same-ASN domains (0)

No ASN linkage in local intel.

🔍 OSINT pivots — external lookups

urlscan.io →VirusTotal →crt.sh (CT) →SecurityTrails →whois (who.is) →DNSDumpster →Shodan →Censys →GreyNoise →URLhaus →ThreatMiner →Web Archive →

🔗 Internal pivots & actions

Advanced Search →OSINT Pivot (30+) →Correlation graph →Link analysis →Passive DNS →DNS Audit →Timeline →Takedown draft →Export STIX/MISP →Add to case →

📁 Case Management

+ New case from this
Every panel resolves local-first: threat, category, first-seen & sightings from indicators; DNS from dns_records; WHOIS from whois_cache; subdomains via bounded suffix match on indicators; related IPs from A/AAAA records; tags, reporting sources and the link graph from the local relations. Live OTX pulses and DNS-over-HTTPS are optional augmentation and their absence never blanks the dossier.
← Domain / URL Index
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

⚡ AI Skills

All SkillsResolveEnrichCorrelateSummarize

🔍 Lookup & Enrich

EnrichmentsPivotLink Analysis

📚 Docs & Reports

DocumentationGenerate ReportAPIPlatforms Hub

💡 Recommendations

⚙ Automation

DNS audit batch

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php

📜 Playbook

Open Response Playbook

🔗 Related Tools

Passive DNSOSINTTakedown