A web or email domain crafted to imitate a real company's, e.g. swapping letters or adding words.
Spoofed domains trick the eye: “rn” for “m,” a zero for an “o,” or an extra word like “careers-” in front of a brand. Emails and login pages hosted on these domains look official at a glance.
Always read the domain right-to-left from the final “.com” — the true owner is the part immediately before it.
What it looks like
“[email protected]” or a portal at “login.paypa1.com.”
Red flags
- Domain has extra words, hyphens, or numbers vs. the real brand
- Sender's domain differs from the company's real website
- Links resolve to an unfamiliar host
Deep-dive guide
Job Board Credential Phishing: Fake Login Pages That Steal Your Accounts
Frequently asked questions
How do I check if a domain is real?
Read the address just before the top-level domain (like .com). “microsoft.com” is real; “microsoft-hr.com” or “microsoft.verify-now.com” are not — the actual owner is the last name before .com.