A domain takeover occurs when an attacker registers a domain that is unclaimed or misconfigured, allowing them to serve malicious content or intercept traffic intended for the original domain.