rule bulwark_https_bulwarkblack_com_custom_gpts_a_case_of_malware_analysis_and_ioc_analyzing { meta: author = "Bulwark Black LLC" source = "https://bulwarkblack.com/custom-gpts-a-case-of-malware-analysis-and-ioc-analyzing/" description = "Auto-extracted indicators. Verify before use; not a behavioral detection rule." generated = "2026-07-15T22:30:54Z" tlp = "TLP:CLEAR" indicator_count = "1" strings: $s0 = "seo.ai" ascii wide nocase // Domains condition: any of ($s*) }