CLOAK - Anonymous hosting and infrastructure (79ea4d13-82b7-5139-8d0f-e940ac1226f9)

Host services, store data, or operate infrastructure while limiting exposure of operators, providers, payment trails, or backend origin systems. Includes offshore/privacy-preserving hosting, onion/I2P services, proxies, VPNs, reverse proxies, and short-lived infrastructure.

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Proxy - T1090 (731f4f55-b6d0-41d1-a7a9-072a66389aea)	Attack Pattern	CLOAK - Anonymous hosting and infrastructure (79ea4d13-82b7-5139-8d0f-e940ac1226f9)	Concealment Layers for Online Anonymity and Knowledge (CLOAK)	1
CLOAK - Anonymous hosting and infrastructure (79ea4d13-82b7-5139-8d0f-e940ac1226f9)	Concealment Layers for Online Anonymity and Knowledge (CLOAK)	Protocol Tunneling - T1572 (4fe28b27-b13c-453e-a386-c2ef362a573b)	Attack Pattern	1
CLOAK - Anonymous hosting and infrastructure (79ea4d13-82b7-5139-8d0f-e940ac1226f9)	Concealment Layers for Online Anonymity and Knowledge (CLOAK)	Domain Fronting - T1090.004 (ca9d3402-ada3-484d-876a-d717bd6e05f2)	Attack Pattern	1
CLOAK - Anonymous hosting and infrastructure (79ea4d13-82b7-5139-8d0f-e940ac1226f9)	Concealment Layers for Online Anonymity and Knowledge (CLOAK)	External Proxy - T1090.002 (69b8fd78-40e8-4600-ae4d-662c9d7afdb3)	Attack Pattern	1
Proxy - T1090 (731f4f55-b6d0-41d1-a7a9-072a66389aea)	Attack Pattern	Domain Fronting - T1090.004 (ca9d3402-ada3-484d-876a-d717bd6e05f2)	Attack Pattern	2
Proxy - T1090 (731f4f55-b6d0-41d1-a7a9-072a66389aea)	Attack Pattern	External Proxy - T1090.002 (69b8fd78-40e8-4600-ae4d-662c9d7afdb3)	Attack Pattern	2