Wouldn't you still need to do a combination of filtering and manual moderation even with a subdomain? What would stop someone from creating something like 'logi

Wouldn't you still need to do a combination of filtering and manual moderation even with a subdomain? What would stop someone from creating something like 'login.7sheep.io'? If you are spoofing a domain, you probably aren't too concerned with what the TLD is and are counting on people to glance over it.