The above command will create a network alert for all the IPs that are part of the twitter.com domain. This includes subdomains that were discovered using a variety of techniques. And it will configure the recommended list of triggers so you will receive email notifications whenever Shodan finds something new/ unusual/ vulnerable on the monitored IPs.