[preg_match]

This is basically sim swaps attacks or number porting attacks but for domains.

If the telecos can figure it out, anyone can. Yes it took them way too long, but those attack vectors are essentially dead now.