All questions
Q & A Security · August 1, 2026

What makes a URL look legitimate?

Attackers use look-alike domains (paypa1.com), subdomains (paypal.com.evil.com), URL shorteners, homoglyph characters (pаypal.com with Cyrillic ‘а’), and valid HTTPS certificates to create convincing URLs. HTTPS alone does not mean a site is safe.

Read the full guide
What Is a Phishing Link? How to Spot and Avoid Them
Phishing links trick users into handing over passwords, credit card numbers, or installing malware — all by mimicking legitimate URLs. Here's how attackers build them and how to avoid the trap.
Related questions
Can email authentication stop phishing? Can a phishing link harm you just by clicking it? How do phishing kits work? What should I do if I clicked a phishing link?