Hot Take One different character style (the same character) can lead to a phishing page

Yes, I will record a GIF explaining how to install it. There is no secret to installing it. First, download the NextDNS.cer file, right-click on it, then click Install Certificate. Next, choose to install for all users and select "Trusted Root Certification Authorities", then finish.
Thank you, it worked, but this not detected by security extensions!

2025-10-11 14.00.32 xn--citibnk-pbd.com 8191f00749fb.jpg
 
Thank you,
You're welcome! (y)
it worked, but this not detected by security extensions!
Exactly, it wasn't blocked by any extension or antivirus except ESET. That's because this phishing site is dead; the website has been removed, so antivirus programs don't block it because it poses no danger to visitors. ;)
 
You're welcome! (y)

Exactly, it wasn't blocked by any extension or antivirus except ESET. That's because this phishing site is dead; the website has been removed, so antivirus programs don't block it because it poses no danger to visitors. ;)
But you posted several blocks by variable security vendos!

 
  • Like
Reactions: piquiteco
But you posted several blocks by variable security vendos!
Yes, because the phishing URL was different, which is still active, and I hadn't noticed the link you posted. I also don't remember where I got that URL from. It's very likely that it was during testing with URLVoid and then searching on PhishTank. Later, I realized that it wasn't the same URL as yours.
 
Yes, because the phishing URL was different, which is still active, and I hadn't noticed the link you posted. I also don't remember where I got that URL from. It's very likely that it was during testing with URLVoid and then searching on PhishTank. Later, I realized that it wasn't the same URL as yours.
Exactly; I got this sample from WS thread.
It is URL which when typed redirects to another URL.
 
  • Like
Reactions: piquiteco
In such a situation, a password manager would be useful. For me, I don't write links to important websites that I log in to every time I need to use them in the address bar. Instead, I save the link inside my password manager along with other credentials. When I want to access the website, I open my password manager extension and click on the link instead of checking it every time.