The technique
Phishing domains mimic real ones with swapped characters, extra words like "app" or "claim", or unusual endings. At a glance they look right.
Why it works
Users recognize a brand, not an exact URL. Attackers exploit that with domains that are visually or phonetically close to the real address.
How to protect yourself
Bookmark the real sites and use those bookmarks. Inspect the full domain before connecting. Be extra careful with links from ads, chats, and email, which are the main delivery routes.