Hunt – ASCII Smuggling & Phishing Evasion IOC

This rule monitors for inbound email activity containing sender domains or embedded URL domains known to be associated with malicious phishing campaigns. It flags emails matching a predefined list of suspicious sender domains or URLs that resolve to known malicious infrastructure.