Lookalike domains are silently scamming UK industries, costing millions and exposing critical security gaps.