Optimizing and Customizing Phishing Campaigns using Caddy

**Executive Summary:** This document is a hands-on guide to Caddy (an HTTP/2 web server written in Go), detailing installation from source, Caddyfile syntax, automatic HTTPS via Let’s Encrypt, wildcard certificate setup using DNS ACME challenges and provider plugins, and notes on how Caddy reduced the author’s setup time for phishing engagements; it is an operational tutorial rather than a report of a security incident.