At a glance, a lookalike domain reads as the real supplier or partner. It passes basic email checks because the attacker owns it and set it up properly.
Lookalikes are a favourite tool for invoice fraud and BEC. They are often registered days before the attack and used for a single conversation.
How Centeye handles it
Centeye Lighthouse checks whether a sender's domain is a lookalike and acts on every inbox the message reached.
Lighthouse: email security →