Phishing
Tricking people into revealing credentials or funds via fake sites and messages that impersonate trusted brands.
- glossary
Phishing is a social-engineering attack in which criminals impersonate a trusted entity — a bank, registrar, or marketplace — through deceptive emails, messages, or lookalike websites to steal credentials, seed phrases, or funds. Domain abuse is central to most phishing campaigns: attackers register convincing lookalike names via typosquatting or homograph tricks, then point them at fraudulent pages mimicking the real site. A successful phish against a registrar account is a common precursor to domain hijacking, and DNS hijacking can weaponize a legitimate domain for phishing without the owner noticing.
Related keywords
- phishing
- social engineering
- credential theft
- impersonation
- domain abuse
Contributors
Namefi is a collective of engineers, designers, and operators who obsess over building tools that make managing your onchain domain names effortless.
Victor Zhou is a technology founder and standards editor focused on digital identity and trust. He founded Namefi, edits Ethereum Improvement Proposals, and previously led smart-contract architecture work at Google Labs.
His work sits at the intersection of naming, ownership, and the systems people use to establish identity online. That perspective makes him especially interested in the way names move between personal meaning, public recognition, and digital infrastructure.
For Namefi, Victor edits and writes about domains as durable digital identity: how names become ownable onchain assets, how tokenization changes custody and trust, and what naming can learn from the systems people use to establish identity online.