Sub-technique Obfuscation and Evasion

Look-Alike Domain

Attackers register domains that closely resemble legitimate ones (e.g., paypa1.com) to trick recipients into trusting the sender address.

Mapped to

MITRE ATT&CK®

T1583.001Domains

Connected in PH!SH

Themes

TH0001Media Service Impersonation TH0004Travel Service Impersonation TH0006Postal Service Impersonation TH0008Social Media Service Impersonation TH0009Microsoft Impersonation TH0011Internal Authority Impersonation TH0025Website/Domain Hosting Service Impersonation TH0027Telecommunications Company Impersonation TH0028Benefit Service Impersonation TH0030Energy Industry Impersonation TH0031Apple Impersonation TH0032Google Impersonation TH0044Government Entity Impersonation