Montana Empire Phantom Domain - Banking Brand Impersonation via business.com Squatting

Duo Tech@duotech

•updated Jul 1, 2026•0•0•4

Detects DNS queries for domains matching a specific typosquatting pattern ('[a-z]{3,20}business.com') associated with the Montana Empire campaign, likely used for corporate banking credential harvesting.