URL / Domain Profile

🌐 https://twitter.com/struppigel/status/899537940539478016

URL · host twitter.com · threat 0.50 (HIGH) · Ransomware Actors · CSC Corporate Domains, Inc.
First seen 2026-08-06 13:13:01 · last seen 2026-08-06 13:13:01
🔄 Pivot:📁 Ransomware Actors

Threat score

0.50
MEDIUM

Sightings

1
1 sources

Subdomains (local)

0
from indicators

Related IPs

1
A/AAAA records

DNS records (local)

15
4 types

Reporting sources

1
0 enrichments
PIVOT🔖 URL Profile🔍 Advanced Search🕵 OSINT Pivot🔗 Link Analysis🕑 Timeline📤 Export STIX/MISP

📡 Reporting-source breakdown

Ransomware Actors
1
1 total source links on this indicator.

🏷 Tag breakdown (domain family)

medium-severity
1
url
1
auto-tagged
1
ransomware
1

📈 DNS record-type counts

NS
8
MX
5
SOA
1
A
1

📅 First-seen timeline (family)

2026-08
1

🏷 WHOIS / Registration (local cache)

RegistrarCSC Corporate Domains, Inc.
Abuse Emaildomainabuse@cscglobal.com

🏷 Tags

ransomware url medium-severity auto-tagged
CategoryRansomware Actors
SeverityMEDIUM

📡 DNS Records

Stored (local dns_records) — 15

TypeValueTTLChecked
A 172.66.0.227 181 2026-08-21
MX alt2.aspmx.l.google.com 300 2026-08-21
MX alt1.aspmx.l.google.com 300 2026-08-21
MX alt4.aspmx.l.google.com 300 2026-08-21
MX alt3.aspmx.l.google.com 300 2026-08-21
MX aspmx.l.google.com 300 2026-08-21
NS c.u06.twtrdns.net 9277 2026-08-21
NS a.r06.twtrdns.net 9277 2026-08-21
NS b.u06.twtrdns.net 9277 2026-08-21
NS b.r06.twtrdns.net 9277 2026-08-21
NS a.u06.twtrdns.net 9277 2026-08-21
NS d.r06.twtrdns.net 9277 2026-08-21
NS d.u06.twtrdns.net 9277 2026-08-21
NS c.r06.twtrdns.net 9277 2026-08-21
SOA a.u06.twtrdns.net 7200 2026-08-21

Live (DNS-over-HTTPS · optional augmentation)

TypeValueTTL
A 172.66.0.227 202
MX 10 alt3.aspmx.l.google.com. 222
MX 1 aspmx.l.google.com. 222
MX 5 alt1.aspmx.l.google.com. 222
MX 5 alt2.aspmx.l.google.com. 222
MX 10 alt4.aspmx.l.google.com. 222
NS a.u06.twtrdns.net. 13881
NS d.r06.twtrdns.net. 13881
NS c.u06.twtrdns.net. 13881
NS c.r06.twtrdns.net. 13881
NS b.u06.twtrdns.net. 13881
NS b.r06.twtrdns.net. 13881
NS a.r06.twtrdns.net. 13881
NS d.u06.twtrdns.net. 13881
TXT google-site-verification=F2uUiLUsD6kQlpUVQzxUM3PHa0uPo5GBS84SCG8QwXI 119
TXT google-site-verification=600dQ0pZYsH2xOFt4hYmf5f5NpjCbWE_qk5Y04dErYM 119
TXT v=spf1 ip4:199.16.156.0/22 ip4:199.59.148.0/22 ip4:8.25.194.0/23 ip4:8.25.196.0/23 ip4:204.92.114.203 ip4:204.92.114.204/31 include:_spf.google.com include:_thirdparty.twitter.com -all 119
TXT miro-verification=6e1ca9ad6d0c2cd2e4186141265f23ed618cfe37 119
TXT adobe-idp-site-verification=a2ff8fc40c434d1d6f02f68b0b1a683e400572ab8c1f2c180c71c3d985b9270a 119
TXT google-site-verification=TNhAkfLUeIbzzzSgPNxS5aEkKMf3aUcpPmCK1_kmIvU 119
TXT MS=BEE202D20C326867290BDEFA2DDDF4594B5D6860 119
TXT linear-domain-verification=t5iq7e7nbw5w 119
TXT bj6sbt5xqs9hw9jrfvz7hplrg0l680sb 119
TXT notion-domain-verification=uKi5TAGxlhWMHG9uHKHkDY3cVc6zraAE1I44bILENlB 119
TXT canva-site-verification=lMnZ3wMh7c1uqZqa-cxZTg 119
TXT slack-domain-verification=9oO8P4Glf4252QJDOg4rHGs6KlSkBuI5ZVmWRO8d 119
TXT google-site-verification=P9-NRZ0gaRKRGNDOXOjct5XETPtr3P9D-XA8HnlbAy4 119
TXT loom-site-verification=638c6bc173b9458997f64d305bf42499 119
TXT google-site-verification=q1ghWjGLX9Ba-Gy_B4n_pAgC_mQYzWmQpOD8CMWl_Hw 119
TXT atlassian-domain-verification=j6u0o1PTkobCXC84uEF/sWpIPtaZURBVYqKzmTvT8wugLcHT1vvrzzA63iP1qSLN 119
TXT stripe-verification=46F7B88485621DC18923B43D12E90E6CDBCE232F2FEBCF084E6EFA91F6BA707D 119
TXT google-site-verification=h6dJIv0HXjLOkGAotLAWEzvoi9SxqP4vjpx98vrCvvQ 119
TXT traction-guest=a4d0248d-fe01-4222-8fcc-33f68323e667 119
TXT traction-guest=6882b04e-4188-4ff9-8bb4-bff5a3d358e6 119
TXT 0a8c0fc6-bfa5-4ea7-b09b-87f2989022d6 119
TXT wrike-verification=MjU4MTA5MjoyN2UzNDc1MjU3MDZiZTY4NjBiNzliNDQ2OTUwNWY3NmM5NDgyMTBlYzFkNTcwYTE2YWNmZDdkNTY2ZmE4Yzlh 119
TXT mixpanel-domain-verify=164dda91-31f4-41e8-a816-0f59b38fea30 119
TXT apple-domain-verification=zd1iHoEO9LILEQIq 119

🖥 Related IPs (1)

Resolved from local A/AAAA records (augmented with live DoH when reachable). Each pivots to its IP dossier.

172.66.0.227 →

🌐 Subdomains — local intel (0)

No subdomains of twitter.com in local intel. Check crt.sh ↗

📡 Reporting Sources (1)

MISP Galaxy RansomwareRansomware Actors

🌐 Same-ASN domains (0)

No ASN linkage in local intel.

🔍 OSINT pivots — external lookups

urlscan.io →VirusTotal →crt.sh (CT) →SecurityTrails →whois (who.is) →DNSDumpster →Shodan →Censys →GreyNoise →URLhaus →ThreatMiner →Web Archive →

🔗 Internal pivots & actions

Advanced Search →OSINT Pivot (30+) →Correlation graph →Link analysis →Passive DNS →DNS Audit →Timeline →Takedown draft →Export STIX/MISP →Add to case →

📁 Case Management

+ New case from this
Every panel resolves local-first: threat, category, first-seen & sightings from indicators; DNS from dns_records; WHOIS from whois_cache; subdomains via bounded suffix match on indicators; related IPs from A/AAAA records; tags, reporting sources and the link graph from the local relations. Live OTX pulses and DNS-over-HTTPS are optional augmentation and their absence never blanks the dossier.
← Domain / URL Index
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

⚡ AI Skills

All SkillsResolveEnrichCorrelateSummarize

🔍 Lookup & Enrich

EnrichmentsPivotLink Analysis

📚 Docs & Reports

DocumentationGenerate ReportAPIPlatforms Hub

💡 Recommendations

⚙ Automation

DNS audit batch

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php

📜 Playbook

Open Response Playbook

🔗 Related Tools

Passive DNSOSINTTakedown