A spoofed domain is a web or email domain that is intentionally designed to look like a legitimate organization’s address, often by swapping letters, adding words, or using a similar top-level domain. The goal is to make a message, login page, or support request seem trustworthy enough that a victim will click, sign in, or approve an action without thinking twice.
In cyber security, spoofed domains are a common tool in phishing, business email compromise, and MFA abuse. Attackers use them to impersonate security teams, brands, or internal services, then collect credentials or trigger malicious authentication prompts. Defenders look for domain-registration anomalies, lookalike names, and mismatched email authentication results. Controls such as SPF, DKIM, and DMARC help reduce email spoofing, while user training and phishing-resistant MFA limit the damage when a convincing fake slips through.