Domain Spoofing

Overview

Domain spoofing involves registering domains that look similar to legitimate ones through typosquatting, homograph attacks, or subdomain manipulation. Attackers might use 'rn' instead of 'm', add hyphens, or use different top-level domains. These fake domains host phishing sites or send spoofed emails. Users often don't notice subtle differences, especially on mobile devices. Domain spoofing is particularly dangerous because the attacker controls the entire infrastructure, allowing them to create convincing SSL certificates and professional-looking websites.