URL / Domain Profile

🌐 https://twitter.com/struppigel/status/794444032286060544

URL · host twitter.com · threat 0.50 (HIGH) · Ransomware Actors · CSC Corporate Domains, Inc.
First seen 2026-08-06 13:13:00 · last seen 2026-08-06 13:13:00
🔄 Pivot:📁 Ransomware Actors

Threat score

0.50
MEDIUM

Sightings

1
1 sources

Subdomains (local)

0
from indicators

Related IPs

2
A/AAAA records

DNS records (local)

15
4 types

Reporting sources

1
0 enrichments
PIVOT🔖 URL Profile🔍 Advanced Search🕵 OSINT Pivot🔗 Link Analysis🕑 Timeline📤 Export STIX/MISP

📡 Reporting-source breakdown

Ransomware Actors
1
1 total source links on this indicator.

🏷 Tag breakdown (domain family)

url
1
auto-tagged
1
ransomware
1
medium-severity
1

📈 DNS record-type counts

NS
8
MX
5
SOA
1
A
1

📅 First-seen timeline (family)

2026-08
1

🏷 WHOIS / Registration (local cache)

RegistrarCSC Corporate Domains, Inc.
Abuse Emaildomainabuse@cscglobal.com

🏷 Tags

ransomware url medium-severity auto-tagged
CategoryRansomware Actors
SeverityMEDIUM

📡 DNS Records

Stored (local dns_records) — 15

TypeValueTTLChecked
A 172.66.0.227 181 2026-08-21
MX alt2.aspmx.l.google.com 300 2026-08-21
MX alt1.aspmx.l.google.com 300 2026-08-21
MX alt4.aspmx.l.google.com 300 2026-08-21
MX alt3.aspmx.l.google.com 300 2026-08-21
MX aspmx.l.google.com 300 2026-08-21
NS c.u06.twtrdns.net 9277 2026-08-21
NS a.r06.twtrdns.net 9277 2026-08-21
NS b.u06.twtrdns.net 9277 2026-08-21
NS b.r06.twtrdns.net 9277 2026-08-21
NS a.u06.twtrdns.net 9277 2026-08-21
NS d.r06.twtrdns.net 9277 2026-08-21
NS d.u06.twtrdns.net 9277 2026-08-21
NS c.r06.twtrdns.net 9277 2026-08-21
SOA a.u06.twtrdns.net 7200 2026-08-21

Live (DNS-over-HTTPS · optional augmentation)

TypeValueTTL
A 162.159.140.229 26
MX 5 alt2.aspmx.l.google.com. 196
MX 10 alt3.aspmx.l.google.com. 196
MX 1 aspmx.l.google.com. 196
MX 5 alt1.aspmx.l.google.com. 196
MX 10 alt4.aspmx.l.google.com. 196
NS a.r06.twtrdns.net. 12616
NS d.u06.twtrdns.net. 12616
NS b.u06.twtrdns.net. 12616
NS c.u06.twtrdns.net. 12616
NS c.r06.twtrdns.net. 12616
NS a.u06.twtrdns.net. 12616
NS d.r06.twtrdns.net. 12616
NS b.r06.twtrdns.net. 12616
TXT google-site-verification=q1ghWjGLX9Ba-Gy_B4n_pAgC_mQYzWmQpOD8CMWl_Hw 293
TXT wrike-verification=MjU4MTA5MjoyN2UzNDc1MjU3MDZiZTY4NjBiNzliNDQ2OTUwNWY3NmM5NDgyMTBlYzFkNTcwYTE2YWNmZDdkNTY2ZmE4Yzlh 293
TXT MS=BEE202D20C326867290BDEFA2DDDF4594B5D6860 293
TXT google-site-verification=F2uUiLUsD6kQlpUVQzxUM3PHa0uPo5GBS84SCG8QwXI 293
TXT traction-guest=a4d0248d-fe01-4222-8fcc-33f68323e667 293
TXT miro-verification=6e1ca9ad6d0c2cd2e4186141265f23ed618cfe37 293
TXT mixpanel-domain-verify=164dda91-31f4-41e8-a816-0f59b38fea30 293
TXT google-site-verification=P9-NRZ0gaRKRGNDOXOjct5XETPtr3P9D-XA8HnlbAy4 293
TXT canva-site-verification=lMnZ3wMh7c1uqZqa-cxZTg 293
TXT notion-domain-verification=uKi5TAGxlhWMHG9uHKHkDY3cVc6zraAE1I44bILENlB 293
TXT 0a8c0fc6-bfa5-4ea7-b09b-87f2989022d6 293
TXT adobe-idp-site-verification=a2ff8fc40c434d1d6f02f68b0b1a683e400572ab8c1f2c180c71c3d985b9270a 293
TXT google-site-verification=600dQ0pZYsH2xOFt4hYmf5f5NpjCbWE_qk5Y04dErYM 293
TXT atlassian-domain-verification=j6u0o1PTkobCXC84uEF/sWpIPtaZURBVYqKzmTvT8wugLcHT1vvrzzA63iP1qSLN 293
TXT google-site-verification=h6dJIv0HXjLOkGAotLAWEzvoi9SxqP4vjpx98vrCvvQ 293
TXT traction-guest=6882b04e-4188-4ff9-8bb4-bff5a3d358e6 293
TXT apple-domain-verification=zd1iHoEO9LILEQIq 293
TXT google-site-verification=TNhAkfLUeIbzzzSgPNxS5aEkKMf3aUcpPmCK1_kmIvU 293
TXT v=spf1 ip4:199.16.156.0/22 ip4:199.59.148.0/22 ip4:8.25.194.0/23 ip4:8.25.196.0/23 ip4:204.92.114.203 ip4:204.92.114.204/31 include:_spf.google.com include:_thirdparty.twitter.com -all 293
TXT stripe-verification=46F7B88485621DC18923B43D12E90E6CDBCE232F2FEBCF084E6EFA91F6BA707D 293
TXT bj6sbt5xqs9hw9jrfvz7hplrg0l680sb 293
TXT linear-domain-verification=t5iq7e7nbw5w 293
TXT loom-site-verification=638c6bc173b9458997f64d305bf42499 293
TXT slack-domain-verification=9oO8P4Glf4252QJDOg4rHGs6KlSkBuI5ZVmWRO8d 293

🖥 Related IPs (2)

Resolved from local A/AAAA records (augmented with live DoH when reachable). Each pivots to its IP dossier.

172.66.0.227 → 162.159.140.229 →

🌐 Subdomains — local intel (0)

No subdomains of twitter.com in local intel. Check crt.sh ↗

📡 Reporting Sources (1)

MISP Galaxy RansomwareRansomware Actors

🌐 Same-ASN domains (0)

No ASN linkage in local intel.

🔍 OSINT pivots — external lookups

urlscan.io →VirusTotal →crt.sh (CT) →SecurityTrails →whois (who.is) →DNSDumpster →Shodan →Censys →GreyNoise →URLhaus →ThreatMiner →Web Archive →

🔗 Internal pivots & actions

Advanced Search →OSINT Pivot (30+) →Correlation graph →Link analysis →Passive DNS →DNS Audit →Timeline →Takedown draft →Export STIX/MISP →Add to case →

📁 Case Management

+ New case from this
Every panel resolves local-first: threat, category, first-seen & sightings from indicators; DNS from dns_records; WHOIS from whois_cache; subdomains via bounded suffix match on indicators; related IPs from A/AAAA records; tags, reporting sources and the link graph from the local relations. Live OTX pulses and DNS-over-HTTPS are optional augmentation and their absence never blanks the dossier.
← Domain / URL Index
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

⚡ AI Skills

All SkillsResolveEnrichCorrelateSummarize

🔍 Lookup & Enrich

EnrichmentsPivotLink Analysis

📚 Docs & Reports

DocumentationGenerate ReportAPIPlatforms Hub

💡 Recommendations

⚙ Automation

DNS audit batch

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php

📜 Playbook

Open Response Playbook

🔗 Related Tools

Passive DNSOSINTTakedown