⚠️ Urgent Action Required
Your account may be compromised. Please verify now:
https://secure-account-verification-login123.0x01337.wtf
This link uses a fake domain. The real company name appears in the subdomain,
but the actual domain is 0x01337.wtf. Attackers use this trick to fool users.
🌐 Understanding URLs
https://www.bank.com/login=?parametervalue
- https:// → secure connection
- bank.com → full domain name
- /login → page path
- =?parametervalue → additional info for page load
Always focus on the domain name, not the full string.
🏷️ Domain Trick Example
https://paypal.verify-user-secure.phishy.run
The real domain is:
phishy.run
❌ Not PayPal
🌐 List of example URLs pointing to this site:
this.is.a.phishy.sitethis.link.is.phishy.babysmells.like.phishy.wtflogin.microsoftonline.com.phishy.clickphishing-demo.fuckit.runlogin.microsoftonline.cloud.0x01337.lolsecure-account-verification-login123.0x01337.wtfpaypal.verify-user-secure.phishy.run
🔍 Real-Time URL Analyzer
Paste a URL you have or from above into the field below to check for common phishing indicators:
Waiting for input...
✅ Stay Safe
- Hover before clicking
- Check the domain carefully
- Watch for urgency or scare tactics
- Go directly to official websites, don't search
- Don't ask ChatGPT, use your brain