UA Phishing sites are fake web resources built to deceive users and steal their sensitive data: logins, passwords, banking details, or other confidential information. They can look almost identical to the original sites, but they carry certain telltale signs you can use to spot them.
Knowing how to recognize these resources is an important cybersecurity skill. To help reinforce that knowledge, here’s a test question with multiple-choice answers.
What are the typical signs of phishing sites? (choose several options)
a. It uses the “http://” protocol
b. The site is built on the same platform as the original
c. The letters or digits in the name are scrambled
d. It uses the “https://” protocol
Explaining the options
a. It uses the “http://” protocol — this is one of the most common signals that a site could be unsafe. Legitimate modern sites mostly run over the secure HTTPS protocol, which encrypts data between the browser and the server. If a site uses HTTP, information is transmitted in plain text, creating a risk that logins, passwords, or card numbers could be intercepted.
b. The site is built on the same platform as the original — this factor is not an indicator of phishing. Attackers can copy a site’s design regardless of the platform behind it. The mere fact that a resource uses the same CMS (WordPress, Shopify, etc.) doesn’t make it a phishing site, though combined with other signs it can be part of a fraudulent scheme.
c. The letters or digits in the name are scrambled — a classic technique known as typosquatting. For instance, instead of google.com, attackers might register g00gle.com or go0gle.co. These changes often go unnoticed by an inattentive user, especially when the page design copies the original as closely as possible. This is one of the most common signs, and one of the easiest to check for.
d. It uses the “https://” protocol — having HTTPS today is no guarantee of safety. Many phishing sites get SSL certificates too, since they’re cheap and easy to obtain. So while HTTPS is a requirement for safe sites, its presence doesn’t mean you’re looking at an official resource. This isn’t a typical sign of phishing, but the absence of HTTPS is already a significant red flag.
The correct answer
a. It uses the “http://” protocol
c. The letters or digits in the name are scrambled
Conclusion
Phishing sites can look remarkably similar to the real thing, but an attentive user will always notice certain suspicious details. Using HTTP instead of HTTPS, strange characters, or letters swapped around in the domain name are the main indicators worth watching for. Remember: checking a site’s address before entering any personal data is one of the simplest and most effective ways to protect yourself from phishing.
