Tykit Phishing Domains

Duo Tech@duotech

•updated Oct 21, 2025•2•0•76

Detects DNS queries for domains associated with the Tykit phishing kit infrastructure. These domains are used for hosting phishing pages and for C2 exfiltration.