Legal Threat Lure Phishing: Gmail Sender + short.gy URL to chongdaotang.net

Ibrahim Saud@tektrix

•updated Jun 29, 2026•0•0•2

This rule monitors DNS query logs for requests to specific domains associated with malicious activity. It aggregates these requests by endpoint to identify potential command and control (C2) communication or beaconing behavior.