rule bulwark_https_bulwarkblack_com_milk_dragon_aitm_phishing_social_commerce_defense { meta: author = "Bulwark Black LLC" source = "https://bulwarkblack.com/milk-dragon-aitm-phishing-social-commerce-defense/" description = "Auto-extracted indicators. Verify before use; not a behavioral detection rule." generated = "2026-10-04T15:12:14Z" tlp = "TLP:CLEAR" indicator_count = "1" strings: $s0 = "urlscan.io" ascii wide nocase // Domains condition: any of ($s*) }