A site serving a self-signed or short-validity certificate issued in the last 24 hours.
“Decline. Throwaway certificates are the standard launch shape for phishing. Real businesses provision proper TLS before going live.”
SSL certificate lifecycle: issuance, length, issuer reputation, certificate-rotation patterns. Each fires with named evidence and a 3-question analyst Q&A trail.
SSL certificate lifecycle: issuance, length, issuer reputation, certificate-rotation patterns. Tier-1 SOC analysts use them to cut triage time on suspicious http crawling history behavior; CTI teams pivot from them to the broader campaign graph.
Each row opens a leaf page with the signal's direction, named evidence, and 3-question Q&A trail. Use them as audit anchors when a verdict surfaces this subgroup.
Three real-world situations where SSL Behavior evidence dominates the decision. Verdict and explanation are how VerdictIQ would frame the outcome to an analyst, not raw signal slugs.
4 more subgroups in this group, each bundling signals that share a different mechanism. Tap one to inspect its signal names.
Free tier: 100 IOCs/day, LLM layer included.