BRE Typosquatted Microsoft-Brand Phishing Redirect Domains Contacted

Ibrahim Saud@tektrix

•updated Jun 25, 2026•1•0•7

This rule monitors DNS query events for domains known to be associated with phishing campaigns, specifically those spoofing Microsoft or other common service brands. These domains are frequently used in credential harvesting attacks to lure users to malicious landing pages.