Someone needs to learn about RFC 2606:
> In one evaluation, the fictional target company chosen by our evaluation partner shared a name with an active website domain name
Haha yes that was a very silly mistake on their part; they should at least have registered the domain they were targeting; that would actually have been a good canary - any real accesses should set off an alarm. While I knew of .example I didn't know .test - hmm that's quite nice!
Microsoft screwing up the DNS on one of the reserved domains [0] was not awesome.
[0] https://arstechnica.com/information-technology/2026/01/odd-a...