You don't need to be an 'investor' to invest in Singletrack: 6 days left: 95% of target - Find out more
Best way to block/alert user to fake sites? Ideally across android, iOS, and PC (mainly firefox but also ocassionally chrome/edge).
It cannot be anything which causes slowdowns/nags the user/stops legit sites working.
Backstory is my wife (who is generally tech savvy) got caught out earlier in the month by a fake website.
Thing is I've had a look and am not convinced that I would have seen it either! (am a programmer by profession and moreover extremely untrusting/cynical by nature!). Unfortunately it's gone now so i can't post screenshots but it was proporting to be an outlet from a highstreet shop.
It had a properly signed certificate, the domain name looked legit also, appearance-wise, it was identical to the main site but made up to look like it was low stock/clearance on everything and the pricing wasn't so cheap that it was obvious.
Also they posted us a cheap bit of chinese tat (from china) so presumably they can use the tracking code from that to argue against our visa claim that that the items were real and have been delivered.
It had a properly signed certificate
Which is completely meaningless, you can get any website signed in a few seconds without any ID, you just need a DNS entry somewhere.
I've recently seen North Face and RAB "Outlet Sale" scams. The standard maxim is "if it looks too good to be true it probably is". If you suspect anything just Google it. Both the above were confirmed just by Googling.
One line of defense is your bank - whenever I buy anything (apart from a few places) my NatWest app asks me to verify it - at that point I can check that the person I am paying is really who the bank thinks I am paying.
opendns.com has some free options that allow you to guard against phishing attacks. Works for any device connected to your WiFi router and mobile phones on WiFi. https://www.opendns.com/setupguide/
https://www.quad9.net/ also.
If in doubt, bang the domain name into https://www.whois.com/whois/ - any site that was registered in the last few weeks for only one year is certainly fraudulent, no legitimate business does that.