URL / Domain Profile

🌐 https://twitter.com/BleepinComputer/status/804810315456200704

URL · host twitter.com · threat 0.50 (HIGH) · Ransomware Actors · CSC Corporate Domains, Inc.
First seen 2026-08-06 13:13:00 · last seen 2026-08-06 13:13:00
🔄 Pivot:📁 Ransomware Actors

Threat score

0.50
MEDIUM

Sightings

1
1 sources

Subdomains (local)

0
from indicators

Related IPs

1
A/AAAA records

DNS records (local)

15
4 types

Reporting sources

1
0 enrichments
PIVOT🔖 URL Profile🔍 Advanced Search🕵 OSINT Pivot🔗 Link Analysis🕑 Timeline📤 Export STIX/MISP

📡 Reporting-source breakdown

Ransomware Actors
1
1 total source links on this indicator.

🏷 Tag breakdown (domain family)

medium-severity
1
url
1
auto-tagged
1
ransomware
1

📈 DNS record-type counts

NS
8
MX
5
SOA
1
A
1

📅 First-seen timeline (family)

2026-08
1

🏷 WHOIS / Registration (local cache)

RegistrarCSC Corporate Domains, Inc.
Abuse Emaildomainabuse@cscglobal.com

🏷 Tags

ransomware url medium-severity auto-tagged
CategoryRansomware Actors
SeverityMEDIUM

📡 DNS Records

Stored (local dns_records) — 15

TypeValueTTLChecked
A 172.66.0.227 181 2026-08-21
MX alt2.aspmx.l.google.com 300 2026-08-21
MX alt1.aspmx.l.google.com 300 2026-08-21
MX alt4.aspmx.l.google.com 300 2026-08-21
MX alt3.aspmx.l.google.com 300 2026-08-21
MX aspmx.l.google.com 300 2026-08-21
NS c.u06.twtrdns.net 9277 2026-08-21
NS a.r06.twtrdns.net 9277 2026-08-21
NS b.u06.twtrdns.net 9277 2026-08-21
NS b.r06.twtrdns.net 9277 2026-08-21
NS a.u06.twtrdns.net 9277 2026-08-21
NS d.r06.twtrdns.net 9277 2026-08-21
NS d.u06.twtrdns.net 9277 2026-08-21
NS c.r06.twtrdns.net 9277 2026-08-21
SOA a.u06.twtrdns.net 7200 2026-08-21

Live (DNS-over-HTTPS · optional augmentation)

TypeValueTTL
A 172.66.0.227 298
MX 5 alt1.aspmx.l.google.com. 158
MX 1 aspmx.l.google.com. 158
MX 10 alt3.aspmx.l.google.com. 158
MX 5 alt2.aspmx.l.google.com. 158
MX 10 alt4.aspmx.l.google.com. 158
NS a.u06.twtrdns.net. 13475
NS b.u06.twtrdns.net. 13475
NS b.r06.twtrdns.net. 13475
NS a.r06.twtrdns.net. 13475
NS d.r06.twtrdns.net. 13475
NS c.u06.twtrdns.net. 13475
NS c.r06.twtrdns.net. 13475
NS d.u06.twtrdns.net. 13475
TXT adobe-idp-site-verification=a2ff8fc40c434d1d6f02f68b0b1a683e400572ab8c1f2c180c71c3d985b9270a 220
TXT traction-guest=6882b04e-4188-4ff9-8bb4-bff5a3d358e6 220
TXT canva-site-verification=lMnZ3wMh7c1uqZqa-cxZTg 220
TXT google-site-verification=600dQ0pZYsH2xOFt4hYmf5f5NpjCbWE_qk5Y04dErYM 220
TXT loom-site-verification=638c6bc173b9458997f64d305bf42499 220
TXT miro-verification=6e1ca9ad6d0c2cd2e4186141265f23ed618cfe37 220
TXT slack-domain-verification=9oO8P4Glf4252QJDOg4rHGs6KlSkBuI5ZVmWRO8d 220
TXT apple-domain-verification=zd1iHoEO9LILEQIq 220
TXT google-site-verification=P9-NRZ0gaRKRGNDOXOjct5XETPtr3P9D-XA8HnlbAy4 220
TXT traction-guest=a4d0248d-fe01-4222-8fcc-33f68323e667 220
TXT linear-domain-verification=t5iq7e7nbw5w 220
TXT notion-domain-verification=uKi5TAGxlhWMHG9uHKHkDY3cVc6zraAE1I44bILENlB 220
TXT MS=BEE202D20C326867290BDEFA2DDDF4594B5D6860 220
TXT mixpanel-domain-verify=164dda91-31f4-41e8-a816-0f59b38fea30 220
TXT google-site-verification=F2uUiLUsD6kQlpUVQzxUM3PHa0uPo5GBS84SCG8QwXI 220
TXT stripe-verification=46F7B88485621DC18923B43D12E90E6CDBCE232F2FEBCF084E6EFA91F6BA707D 220
TXT v=spf1 ip4:199.16.156.0/22 ip4:199.59.148.0/22 ip4:8.25.194.0/23 ip4:8.25.196.0/23 ip4:204.92.114.203 ip4:204.92.114.204/31 include:_spf.google.com include:_thirdparty.twitter.com -all 220
TXT bj6sbt5xqs9hw9jrfvz7hplrg0l680sb 220
TXT wrike-verification=MjU4MTA5MjoyN2UzNDc1MjU3MDZiZTY4NjBiNzliNDQ2OTUwNWY3NmM5NDgyMTBlYzFkNTcwYTE2YWNmZDdkNTY2ZmE4Yzlh 220
TXT google-site-verification=TNhAkfLUeIbzzzSgPNxS5aEkKMf3aUcpPmCK1_kmIvU 220
TXT google-site-verification=h6dJIv0HXjLOkGAotLAWEzvoi9SxqP4vjpx98vrCvvQ 220
TXT google-site-verification=q1ghWjGLX9Ba-Gy_B4n_pAgC_mQYzWmQpOD8CMWl_Hw 220
TXT 0a8c0fc6-bfa5-4ea7-b09b-87f2989022d6 220
TXT atlassian-domain-verification=j6u0o1PTkobCXC84uEF/sWpIPtaZURBVYqKzmTvT8wugLcHT1vvrzzA63iP1qSLN 220

🖥 Related IPs (1)

Resolved from local A/AAAA records (augmented with live DoH when reachable). Each pivots to its IP dossier.

172.66.0.227 →

🌐 Subdomains — local intel (0)

No subdomains of twitter.com in local intel. Check crt.sh ↗

📡 Reporting Sources (1)

MISP Galaxy RansomwareRansomware Actors

🌐 Same-ASN domains (0)

No ASN linkage in local intel.

🔍 OSINT pivots — external lookups

urlscan.io →VirusTotal →crt.sh (CT) →SecurityTrails →whois (who.is) →DNSDumpster →Shodan →Censys →GreyNoise →URLhaus →ThreatMiner →Web Archive →

🔗 Internal pivots & actions

Advanced Search →OSINT Pivot (30+) →Correlation graph →Link analysis →Passive DNS →DNS Audit →Timeline →Takedown draft →Export STIX/MISP →Add to case →

📁 Case Management

+ New case from this
Every panel resolves local-first: threat, category, first-seen & sightings from indicators; DNS from dns_records; WHOIS from whois_cache; subdomains via bounded suffix match on indicators; related IPs from A/AAAA records; tags, reporting sources and the link graph from the local relations. Live OTX pulses and DNS-over-HTTPS are optional augmentation and their absence never blanks the dossier.
← Domain / URL Index
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

⚡ AI Skills

All SkillsResolveEnrichCorrelateSummarize

🔍 Lookup & Enrich

EnrichmentsPivotLink Analysis

📚 Docs & Reports

DocumentationGenerate ReportAPIPlatforms Hub

💡 Recommendations

⚙ Automation

DNS audit batch

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php

📜 Playbook

Open Response Playbook

🔗 Related Tools

Passive DNSOSINTTakedown