Quick answer
Fake login pages can look identical to the real thing — same logo, same layout, same color scheme. The only reliable check is the URL in your browser's address bar. If the domain is not the official one, close the page immediately.
What Our Tool Checks
URL in the browser bar vs. the brand's official domain
HTTPS padlock presence
How you arrived at the page (link in email/SMS vs. direct navigation)
Any redirect steps before landing on the page
Certificate issuer vs. the brand
Common Warning Signs
Do not open a suspicious login page just to test it — check the URL in your browser's address bar first.
Arrived via a link in an email, text, or message (not by typing the URL)
Domain is slightly different from the real one (e.g. paypa1.com, apple-id-verify.com)
Login page asks for more than usual — security questions, card details, DOB
Page URL is very long or contains random characters
No HTTPS, or HTTPS certificate issued to an unrelated entity
What Not to Submit
To protect your privacy, never paste these into any tool — and never submit passwords, OTPs, card numbers, bank logins, or private IDs.
Your password on any page you arrived at via a link
2FA or OTP codes on a page you are not sure about
Security question answers on an unexpected prompt
What to Do If Something Looks Suspicious
Close the page immediately if the domain looks wrong
Navigate to the site by typing the official URL directly into your browser
If you already entered your password — change it immediately and enable 2FA
Report the phishing URL to Google at google.com/safebrowsing/report_phish