I Turned a Phishing Investigation Into a Full IOC Report. Here’s the Process.

How I used Shodan, ThreatFox, and URLScan to enrich indicators and build structured threat intelligence from a real attack.