I’m currently overseas in SE Asia, it resolves to a local address (10.3.1.1) with a cname record pointing to an AWS load balancer with 3 separate IPs through my ISP’s DNS server. protected-users.twitter.okta.com still appears across a few different DNS records according to dnschecker.org at the time of my post.