Fake websites and email addresses are often used in phishing and targeted attacks. How do fake domains get created, and how to spot one?