When AI Fakes a Brand: Domain Spoofing Is a Crisis of Trust