Domain spoofing is the practice of registering domain names that closely resemble a legitimate organization's domain. Attackers use typosquatting (misspelled names), homograph attacks (visually similar characters), and combo domains to trick users into entering credentials on fake sites.
While domain spoofing targets external victims, infostealer infections target your actual employees. Both threats should be part of a comprehensive brand and identity protection program.