Guide
Signs of phishing websites
The patterns scammers reuse — and how to spot them in seconds.
Run a phishing checkLookalike domains
Watch for swapped letters (rn vs m), extra hyphens, country codes you don't expect, and subdomains that mimic a brand (e.g. brand.support-login.com).
Brand-new registration
Most phishing domains are days or weeks old. Combine domain age with WHOIS to see whether the site has any meaningful history.
Missing or weak HTTPS
HTTPS alone doesn't prove safety, but its absence on a login page is disqualifying.
Urgency and emotional pressure
"Your account will be closed in 24 hours" is a tell. Real services rarely demand action through an unsolicited link.
Unusual payment methods
Wire transfers, gift cards, and crypto are red flags for transactions that should be reversible.