URL / Domain Profile

🌐 gmail.com

DOMAIN · host gmail.com · threat 0.50 (HIGH) · Cryptocurrency · MarkMonitor, Inc.
First seen 2026-08-06 13:09:05 · last seen 2026-08-06 19:47:16
🔄 Pivot:📁 Cryptocurrency

Threat score

0.50
MEDIUM

Sightings

13
10 sources

Subdomains (local)

0
from indicators

Related IPs

16
A/AAAA records

DNS records (local)

22
6 types

Reporting sources

10
0 enrichments
PIVOT🌐 Domain Profile🔍 Advanced Search🕵 OSINT Pivot🔗 Link Analysis🕑 Timeline📤 Export STIX/MISP

📡 Reporting-source breakdown

Sanctions
7
Ransomware Actors
1
Cryptocurrency
1
Threat Actors
1
10 total source links on this indicator.

🏷 Tag breakdown (domain family)

auto-tagged
1
medium-severity
1

📈 DNS record-type counts

MX
5
NS
4
TXT
4
A
4
AAAA
4
SOA
1

📅 First-seen timeline (family)

2026-08
1

🏷 WHOIS / Registration (local cache)

RegistrarMarkMonitor, Inc.
Registrant OrgGoogle LLC
CountryUS

🏷 Tags

medium-severity auto-tagged
CategoryCryptocurrency
SeverityMEDIUM

📡 DNS Records

Stored (local dns_records) — 22

TypeValueTTLChecked
A 142.251.186.83 74 2026-08-06
A 142.251.186.17 74 2026-08-06
A 142.251.186.18 74 2026-08-06
A 142.251.186.19 74 2026-08-06
AAAA 2607:f8b0:4023:100b::13 300 2026-08-06
AAAA 2607:f8b0:4023:100b::53 300 2026-08-06
AAAA 2607:f8b0:4023:100b::12 300 2026-08-06
AAAA 2607:f8b0:4023:100b::11 300 2026-08-06
MX alt4.gmail-smtp-in.l.google.com 1125 2026-08-06
MX gmail-smtp-in.l.google.com 1125 2026-08-06
MX alt1.gmail-smtp-in.l.google.com 1125 2026-08-06
MX alt2.gmail-smtp-in.l.google.com 1125 2026-08-06
MX alt3.gmail-smtp-in.l.google.com 1125 2026-08-06
NS ns2.google.com 13483 2026-08-06
NS ns3.google.com 13483 2026-08-06
NS ns1.google.com 13483 2026-08-06
NS ns4.google.com 13483 2026-08-06
SOA ns1.google.com 60 2026-08-06
TXT v=spf1 redirect=_spf.google.com 158 2026-08-06
TXT yahoo-verification-key=dKYwfVbaxatmcXiXy6LDAxMRirqpOq5tj98iJv9qWVk= 158 2026-08-06
TXT yahoo-verification-key=+eZwIPSgRxkAUzDtqT8Qhk+j4A1JF6V/wtGoyGTkELY= 158 2026-08-06
TXT globalsign-smime-dv=CDYX+XFHUw2wml6/Gb8+59BsH31KzUr6c1l2BPvqKX8= 158 2026-08-06

Live (DNS-over-HTTPS · optional augmentation)

TypeValueTTL
A 172.217.75.17 300
A 172.217.75.18 300
A 172.217.75.83 300
A 172.217.75.19 300
AAAA 2607:f8b0:4023:200b::53 300
AAAA 2607:f8b0:4023:200b::12 300
AAAA 2607:f8b0:4023:200b::13 300
AAAA 2607:f8b0:4023:200b::11 300
MX 5 gmail-smtp-in.l.google.com. 2681
MX 10 alt1.gmail-smtp-in.l.google.com. 2681
MX 30 alt3.gmail-smtp-in.l.google.com. 2681
MX 20 alt2.gmail-smtp-in.l.google.com. 2681
MX 40 alt4.gmail-smtp-in.l.google.com. 2681
NS ns4.google.com. 21600
NS ns3.google.com. 21600
NS ns1.google.com. 21600
NS ns2.google.com. 21600
TXT yahoo-verification-key=dKYwfVbaxatmcXiXy6LDAxMRirqpOq5tj98iJv9qWVk= 300
TXT v=spf1 redirect=_spf.google.com 300
TXT yahoo-verification-key=+eZwIPSgRxkAUzDtqT8Qhk+j4A1JF6V/wtGoyGTkELY= 300
TXT globalsign-smime-dv=CDYX+XFHUw2wml6/Gb8+59BsH31KzUr6c1l2BPvqKX8= 300

🖥 Related IPs (16)

Resolved from local A/AAAA records (augmented with live DoH when reachable). Each pivots to its IP dossier.

142.251.186.83 → 142.251.186.17 → 142.251.186.18 → 142.251.186.19 → 2607:f8b0:4023:100b::13 → 2607:f8b0:4023:100b::53 → 2607:f8b0:4023:100b::12 → 2607:f8b0:4023:100b::11 → 172.217.75.17 → 172.217.75.18 → 172.217.75.83 → 172.217.75.19 → 2607:f8b0:4023:200b::53 → 2607:f8b0:4023:200b::12 → 2607:f8b0:4023:200b::13 → 2607:f8b0:4023:200b::11 →

🌐 Subdomains — local intel (0)

No subdomains of gmail.com in local intel. Check crt.sh ↗

📡 Reporting Sources (10)

CryptoScamDB ReporterCryptocurrency
OFAC SDN List (CSV)Sanctions
OFAC Consolidated (CSV)Sanctions
OFAC SDN (crypto addresses)Sanctions
MISP Galaxy Threat ActorsThreat Actors
MISP Galaxy RansomwareRansomware Actors
OFAC SDN (Treasury)Sanctions
OFAC ConsolidatedSanctions
UN Security Council ConsolidatedSanctions
OFAC SDNSanctions

🌐 Same-ASN domains (0)

No ASN linkage in local intel.

🔍 OSINT pivots — external lookups

urlscan.io →VirusTotal →crt.sh (CT) →SecurityTrails →whois (who.is) →DNSDumpster →Shodan →Censys →GreyNoise →URLhaus →ThreatMiner →Web Archive →

🔗 Internal pivots & actions

Advanced Search →OSINT Pivot (30+) →Correlation graph →Link analysis →Passive DNS →DNS Audit →Timeline →Takedown draft →Export STIX/MISP →Add to case →

📁 Case Management

+ New case from this
Every panel resolves local-first: threat, category, first-seen & sightings from indicators; DNS from dns_records; WHOIS from whois_cache; subdomains via bounded suffix match on indicators; related IPs from A/AAAA records; tags, reporting sources and the link graph from the local relations. Live OTX pulses and DNS-over-HTTPS are optional augmentation and their absence never blanks the dossier.
← Domain / URL Index
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

⚡ AI Skills

All SkillsResolveEnrichCorrelateSummarize

🔍 Lookup & Enrich

EnrichmentsPivotLink Analysis

📚 Docs & Reports

DocumentationGenerate ReportAPIPlatforms Hub

💡 Recommendations

⚙ Automation

DNS audit batch

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php

📜 Playbook

Open Response Playbook

🔗 Related Tools

Passive DNSOSINTTakedown