The hackers would create a lookalike domain with the one particular they aim so that you can seem to be legit. These lookalike domains are a component in their covert act to help make the receiver consider that they are legit. Only as the email protocols would not have https://www.email-3000.com/