@bad_packets @twittersecurity The server they're using under that domain is from @digitalocean. IP being 104.236.252.26.