Validin

Validin is a next generation internet intelligence platform.

[Validin @ValidinLLC]

For analysts and researchers: releasing a new advanced search query language and Search Sessions. Read the announcement:

https://t.co/03azlvoUM6

[Validin @ValidinLLC]

These findings reveal evolved weaponization of the existing watchTowr proof of concept with several novel enhancements in the Nuclei template.

[Validin @ValidinLLC]

Using Validin's Open Directories, a researcher uncovered an attacker's NetScaler exploit toolkit, revealing C2 infrastructure, exploitation techniques, and IOCs.

Discover attacker tooling, intent, and evolution with Validin's Open Directories.

https://t.co/LbAEfZDw3l

[Vega Threat Research @Vega_Threat]

To investigate this campaign, we used @anyrun_app to capture the gated delivery chain in action and @ValidinLLC to map the infrastructure behind it.

[Lontz @lontze7]

New Okta Vishing Theme: "Contact"

Themes switching: support -> claims -> report -> contact

Hunt for:
- contact-{org}.com
- {org}.contact

Tracked through @ValidinLLC

[SentinelLabs @LabsSentinel]

Coffee break - back soon!

Thanks to our friends @ValidinLLC for keeping us all fueled.

[Seth @bluish_red_]

H/t again to @ValidinLLC and @500mk500. We got some great pivots through banner hashes and bouncing finds off maltrail.

Also some white glove assistance from @SreekarMad.

[LABScon 2026 @labscon_io]

🫡 A strong LABScon salute to our partners at Validin for their generous support of the conference!

🔬 Validin is an internet intelligence and threat-hunting platform that helps security teams uncover and track malicious infrastructure using DNS, host and certificate data. @ValidinLLC

👉 Explore: https://t.co/7lBPOQJ9Vg

[Validin @ValidinLLC]

Researching 3 clusters recently reported by GTIG to find unreported fake banquet invitations, Google Drive links, and more.

Inhospitable: Tracking Russian Cyber Espionage Infrastructure https://t.co/9IXwsFJ8pW

[Validin @ValidinLLC]

❤️

[tanner @wbmmfq]

I've probably said it before, but @ValidinLLC is seriously one of the most useful and underrated threat intel tools out there.

[Ryan Naraine @ryanaraine]

A Security Conversations interview with Kenneth Kinion, CEO at threat-intelligence firm Validin @ValidinLLC

https://t.co/fRDJs4Af8g

[PacketWatch @packetwatch]

7/16/26 https://t.co/qX7htjR3TV - This case study shows how to investigate malicious traffic and a threat actor's infrastructure, IP addresses, and domain indicators of compromise.

#validin @ValidinLLC #threatfeed #threatintelligence #threathunting #cybersecurity #cyberincidents #cyberattack #dfir #networksecurity #informationsecurity #teamsixty43

[Validin @ValidinLLC]

PacketWatch, a network threat-hunting and managed cybersecurity company, has both a research workflow and direct product integration with Validin. See how @packetwatch helps protect their customers with Validin in our latest case study:

https://t.co/AhBReVX86O

[The Shadowserver Foundation @Shadowserver]

We have improved our Oracle E-Business Suite fingerprinting by adding domain based scans in collaboration with @ValidinLLC. Around 950 exposed instances now seen globally (no vulnerability assessment). CVE-2026-46817 attempts have been observed in the wild by @DefusedCyber

[Validin @ValidinLLC]

Read their report, with more technical breakdown of the mechanics of the campaign, here:
https://t.co/cDGjCEez4D

[Validin @ValidinLLC]

With the World Cup in full swing, we dug into the IoCs from @GroupIB's Ghost Stadium report and found 3,079 domains still active in the past 14 days.
We've published the full list of 6,000+ suspected domains publicly. Full write-up below ⤵️
https://t.co/UkJwD4BRXO

[S1dhy @s1dhy]

1/

Just came across this using @ValidinLLC searching for "Launch Meeting - Zoom"

domains hosting what looks like XSS > RCE > MS Signed > dropper.exe > miniplasma > more fun

@astrarce @Gi7w0rm @RussianPanda9xx @SquiblydooBlog @MsftSecIntel @banthisguy9349 @_JohnHammond

[S1dhy @s1dhy]

Lets use this pivot point on @ValidinLLC

Title: Zoom Client Update

Reported to @abuse_ch

Telegram info
'bot_url' "6366434554:AAFV0fUvPM4BdKKUvMt9aQwg1nQ8MsxCpXE"
'chat_id' "588250349"

[Vultr @Vultr]

Validin's threat intelligence platform requires unfettered access to data, with affordable, high-performance storage, bandwidth, and scaling.

They’ve found that with Vultr Bare Metal, Cloud Compute, and File System.

See how @ValidinLLC wins with Vultr: https://t.co/DDnZPOxB9t

[Validin @ValidinLLC]

Six months after @DJSnM and @_JohnHammond were targeted with a fake "DMCA takedown" campaign, we revisit old pivots and find some new connections.

https://t.co/kOBltqUbKX

[PIVOTcon @pivot_con]

#PIVOTcon26 edition is over! Time to #pivot to #PIVOTcon27
Big thanks to our sponsors for making this happen!
@silentpush @vtxproject @censysio @urlscanio @ValidinLLC @TalosSecurity @abuse_ch @SpamhausTech @ecrime_ch @epieos @sekoia_io @wearetlpblack @webscout_io @rationaledge 1/