Email phishing

Fake subdomains

Non-existent, but seemingly legitimate subdomains that can be resolved by malicious DNS servers.

Shadow links

A hidden link in the href that is different from the shown text display

Homograph attack/IDN spoofing

Tracking pixel

https://docs.google.com/document/d/1wqnOvWsu2ka10GQqa3uL9KXP_5FIdz3r14Aj_5PPDeg/editdocs.google.com