Comment by blowski

I saw a successful attack on a .dev domain doing exactly this. Links on PCs worked correctly, but phones showed a scam site, so emailed links were attacked.

It was hard to fix because they couldn’t get the spoofed domain, and there were so many copies of bad links everywhere.