God damn. In situations like this how can I detect the fake one? This is truly scary.

1

NextDNS

Pi-hole (with every reasonable blocklist I can find) protects me from many of these domains. NextDNS would be another option for DNS-based blocking for people who don't want to administer it themselves. I also plan to use DNSTwist to generate additional blocklists for typo-based phishing that I can plug into the Pi-hole for important sites.

#Security & Privacy #Threat Detection And Prevention #Ad Blockers 499 social mentions

2

bitwarden

There's a certain point though where you do have to have a some education of what behaviors are and aren't secure/safe/good ones., and which aren't. If you are going to it from a search, for instance, you should always check the URL, and understand what makes a suspect looking domain name. Like in your example, you should be asking why it's bitwardenlogin.com instead of just bitwarden.com.

#Password Managers #Password Management #Security & Privacy 604 social mentions

3

DuckDuckGo

#Search Engine #Web Search #Internet Search 1666 social mentions

4

Neeva

Or better yet, Neeva search engine has zero ads and no tracking all for free. Https://neeva.com.

#iPhone #Web App #Productivity 65 social mentions

5

Country Flags & IP Whois

You can use plugins like Country Flag that show you (in a simple way) the geographical location of the server.

#Geolocation #IP Data #IP Geolocation 2 social mentions

6

Pi-hole

Pi-hole (with every reasonable blocklist I can find) protects me from many of these domains. NextDNS would be another option for DNS-based blocking for people who don't want to administer it themselves. I also plan to use DNSTwist to generate additional blocklists for typo-based phishing that I can plug into the Pi-hole for important sites.

#Security & Privacy #Ad Blockers #Threat Detection And Prevention 1185 social mentions

7

Destiny 2

Unfortunately there are times when it does happen that a company or whatever has to get a non-obvious choice for it's domain name, but it should still set off your "this is sus" response and you should look into the legitimacy first. Especially if a more generic word is the name, like off the top of my head, I know that destiny.com doesn't go to the Bungie web site for the game Destiny, but Destinythegame.com does. But if it was your first time looking, destinythegame.com should look suspect to you. It's far more difficult if the reverse were true though, i.e. If destiny.com did go to a fake site, in my example.

#Action #Data Dashboard #Games 1 social mentions