By checking the address bar, you can verify that the site you accessed did not "redirect" you to a different site. Some attackers will use a "redirect" method to gather data. When redirected, you may click or access a link for a known site and may be sent to another. For example, accessing Amazon should bring you to a website with the web address of "amazon.com." If the address bar shows a different website, the website may not be legitimate. Please see the FAQ for further information about web addresses.

When trying to connect to an illegitimate website, your web browser may prompt you with an error message. If you receive a message like the one below, the website may not be legitimate.

If there is a 🔒 symbol located before the address in the address bar, you are using a private connection. If a website has private connections, it usually is a secure website.

• Do not log into a website unless you trust it. Please make sure that the website is legitimate by following the tips listed in the "Is the Website Legitimate?" section of this article.
• If you do not feel comfortable logging into the website, do not log in.
• If you logged into a site, be sure to log out as soon as you're finished using it.

Some common web domains are:

• .com
• .net
• .org
• .gov (only for official government websites)

If a website does not have one of these domains, it may not be secure or legitimate. This does not mean that websites with these domains are always secure or legitimate, these are only commonly used domains. International sites will often have a domain for their country (such as .uk).