AnonyMousKIT Known Phishing Infrastructure DNS Query
Detects DNS queries for a publicly enumerated subset of domains linked to AnonyMousKIT by the cited research. The source condenses larger domain lists, so this rule does not represent complete campaign-infrastructure coverage. A DNS query records an observable lookup and does not prove that a network connection, page load, or credential submission followed.
Sigma
