uses the number 1 instead of a lowercase letter L? There are enough people who accept misspellings and other misdirection to make this gambit continually popular with credit card bandits. When people go to the phony site, it looks like the site they expected to go to, and they blithely enter their credit card information. To set up one of these scams, an attacker only needs to register the phony domain name, send out his emails, and wait for suckers to show up, ready to be cheated.