ED-102
Threat Intelligence
easy
Straylight Payments Lookalike Domain
Brand monitoring just lit up straylight-payments.com, a fresh registration riding Straylight's treasury brand. Eli needs you to validate reputation, registration, and related infra before Finance starts wiring money to the wrong place.
15-20 min40 pts
Case Brief
Treasury only publishes payment instructions at portal.straylight.finance. Brand monitoring flagged a newly registered lookalike, straylight-payments.com, already linked from a wire-redirect lure in another mailbox. Eli wants the intel dossier filled before anyone blocks half the internet on a hunch.
Objective
Validate the domain across intel sources, pivot related indicators, and document whether this is payment-fraud infrastructure.
Learning Objectives
- Confirm straylight-payments.com is not a Straylight-owned property
- Cross-check reputation, registration, and campaign notes in the intel platform
- Pivot to related infrastructure that strengthens or weakens the lookalike call
- Export ticket-ready IOCs and a supported verdict for treasury
Topics
straylight
payment-fraud
easy