DNS and certificate records converge on mail.resolvent.net
An MX record designates mail.resolvent.net as a mail destination, and an HTTPS certificate for its parent domain includes the same hostname. The overlap corroborates service configuration, not mail traffic or malicious use.
The mail host designated by resolvent.net also appears in an HTTPS certificate recorded for the domain. That overlap answers a concrete infrastructure question: which names are connected by service configuration, rather than merely appearing alongside one another in a list? CTX Threat Intelligence’s records support two such relationships. For resolvent.net, DNS and certificate coverage converge on a designated mail hostname.
Members-only article
This story is members-only. Sign in to read the full body, indicators of compromise, and VirusTotal context.
Sign in to read