Observed role
Observed domain
Role derived only from stored classifications and tags.
Opening Forensia workspaceacquiring
Loading the current evidence view. Navigation and account controls remain available.
Loading recent evidenceacquiring
Indicator
www.cisa.gov
Type domain · source intel_report_ingest
Investigation
18
Verdict
MENTIONED — 1 report, unverified
- What is this
- Domain observed in Intel Report Ingest. Registered 2018 (7 years ago).
- Should you care
- Weak signal — mentioned in 1 report, not corroborated across feeds.
- What to do
- No action — weak signal.
OBSERVEDLIMITED EVIDENCE COVERAGEDeterministic · stored evidence only
Domain investigation
No direct malicious attribution in the available evidence
Live registration, certificate, or DNS context is available, but no direct malicious attribution appears in this snapshot. That describes current coverage; it is not a guarantee that the domain is safe.
Registration
2018 (7 years ago)
2018-12-06 · get.gov
Certificate history
Not established
Certificate Transparency lookup did not complete.
Current DNS
1 current IPv4 address
23.45.96.89
Corpus evidence
1 connectors · 135 citations
Generic co-tags were excluded to avoid false relationships.
Observation window
2026-05-11 → 2026-07-16
First and last appearance in the local corpus, not global activity dates.
What the evidence supports
Findings stay bounded to named sources and observable infrastructure.
What remains unknown
- Certificate Transparency did not complete, so issuance history is unknown.
- No explicitly tagged family or campaign peer is available; generic co-tags were not treated as relationships.
- Domains can be transferred, parked, sinkholed, or repointed after the recorded observation.
What this is
Domain indicator: www.cisa.gov
Mentioned in CISA Cybersecurity Advisories research ingest
Live page
Screenshot of the actual page, via urlscan.io. Hover to view full.
via urlscan.io· scanned 2026-07-21
Threat detail
Exploitation status and malware-family attribution from stored fields.
exploitation: suspected
Graph preview
Neighborhood topology. Open the graph for interactive pivots.
Building relationship previewacquiring
Loading connected indicators, reports and entities.
Continue investigation
High-signal pivots without leaving the thread you started in search.
- Related alerts, reports, and entities
Structured pivots from local graph context.
- Open in graph
Full investigation canvas with neighbor expansion.