Phishing

Phishing is a social-engineering attack in which criminals impersonate a trusted entity — a bank, registrar, or marketplace — through deceptive emails, messages, or lookalike websites to steal credentials, seed phrases, or funds. Domain abuse is central to most phishing campaigns: attackers register convincing lookalike names via typosquatting or homograph tricks, then point them at fraudulent pages mimicking the real site. A successful phish against a registrar account is a common precursor to domain hijacking, and DNS hijacking can weaponize a legitimate domain for phishing without the owner noticing.