Indicator
Type domain · source intel_report_ingest
Enrichment by provider
Grouped attempts with latest status; expand for attempt history.
4 attempts · first 2026-07-21T12:16:31.484239Z · last 2026-07-22T03:28:57.045129Z
Certificate transparency lookup for worm.script.shulud.gen
Types: ct_logs
4 attempts · first 2026-07-21T12:16:31.418209Z · last 2026-07-22T03:28:56.990696Z
Would resolve passive DNS history for worm.script.shulud.gen (integrate PDNS vendor).
Types: passive_dns
4 attempts · first 2026-07-21T12:16:31.490275Z · last 2026-07-22T03:28:57.050231Z
skipped: missing API key
Types: virustotal
CONTINUE INVESTIGATION
High-signal pivots without leaving the thread you started in search.
Structured pivots from local graph context.
See edges, pivots, and corroboration at a glance.
Full inspector with neighbor expansion.