Wazza phishkit infrastructure - TLS SNI boegl-krysl.eu

Arnold Chan@slaz

•updated 19 days ago•0•0•0

Detects network traffic (DNS, TLS SNI, and HTTP) associated with Wazza phishkit infrastructure, specifically looking for malicious domains like boegl-krysl.eu and coppietersrecherche.eu, as well as Cloudflare workers.dev domains used for beaconing and lures.