https://www.systemtek.co.uk/2022/10/attackers-use-of-domain-shadowing-technique/
Attackers use of domain shadowing is getting more widespread