Tykit Phishing Domains

nomit vyas@xoxo

•updated Jun 23, 2026•0•0•4

Detects DNS queries for domains associated with the Tykit phishing kit infrastructure. These domains are used for hosting phishing pages and for C2 exfiltration.