downgrade spoofing attack warning to debug, as it is triggered from using domain names