Phishing Kit Domains Detection

Ankit Mehta@Secvyn

•updated Jun 17, 2026•0•0•6

This rule detects emails containing URLs associated with known phishing kits or malicious domains. It specifically looks for a predefined list of domains commonly used in phishing campaigns targeting various services like Office 365, Teams, Microsoft, Apple, Amazon, PayPal, Google, Adobe, DocuSign, and Zoom.