Any online action that poses risk to systems or users.
Attackers are hijacking abandoned .edu subdomains via orphaned CNAME records, serving spam under trusted university domains and exploiting SEO authority.
A client under spoofing attack refuses to enforce DMARC despite clear phishing evidence.