Forged Healthcare Phishing: Email Client DNS/Network to HolaBrief or LoopedIn Redirect Domains

Ibrahim Saud@tektrix

•updated Jun 28, 2026•0•0•0

This rule detects potential engagement with known phishing infrastructure by monitoring common email clients and browsers for DNS resolutions to specific malicious domains (holabrief.com, loopedin.io) or network connections to suspicious IP addresses associated with a healthcare-themed phishing campaign.