Indicator
Type domain · source intel_report_ingest
Enrichment by provider
Grouped attempts with latest status; expand for attempt history.
2 attempts · first 2026-07-21T16:25:16.272366Z · last 2026-07-21T18:11:15.945083Z
Certificate transparency lookup for pua.win.tool.hackkms
Types: ct_logs
2 attempts · first 2026-07-21T16:25:16.206539Z · last 2026-07-21T18:11:15.878662Z
Would resolve passive DNS history for pua.win.tool.hackkms (integrate PDNS vendor).
Types: passive_dns
2 attempts · first 2026-07-21T16:25:16.277406Z · last 2026-07-21T18:11:15.953447Z
skipped: missing API key
Types: virustotal
CONTINUE INVESTIGATION
High-signal pivots without leaving the thread you started in search.
Structured pivots from local graph context.
See edges, pivots, and corroboration at a glance.
Full inspector with neighbor expansion.