ED-102
Threat Intelligence
easy

Straylight Payments Lookalike Domain

Brand monitoring just lit up straylight-payments.com, a fresh registration riding Straylight's treasury brand. Eli needs you to validate reputation, registration, and related infra before Finance starts wiring money to the wrong place.

15-20 min40 pts

Case Brief

Treasury only publishes payment instructions at portal.straylight.finance. Brand monitoring flagged a newly registered lookalike, straylight-payments.com, already linked from a wire-redirect lure in another mailbox. Eli wants the intel dossier filled before anyone blocks half the internet on a hunch.

Objective

Validate the domain across intel sources, pivot related indicators, and document whether this is payment-fraud infrastructure.

Learning Objectives

  • Confirm straylight-payments.com is not a Straylight-owned property
  • Cross-check reputation, registration, and campaign notes in the intel platform
  • Pivot to related infrastructure that strengthens or weakens the lookalike call
  • Export ticket-ready IOCs and a supported verdict for treasury

Topics

straylight
payment-fraud
easy