Spoofed URLs are more common every day, and the spoofers are getting smarter too. Here is another tip that can save you a heap
of trouble. I know it works in Internet Explorer. I have heard that it works in Firefox, Netscape, and Opera too.
When you're on a web page that you want to verify, highlight the address in the browser address bar and delete it. Now copy and
paste the following code -- all of it -- in your browser address bar and
hit ENTER:
javascript:alert("The actual URL is:\t\t" + location.protocol + "//" + location.hostname + "/" + "\nThe address URL is:\t\t" + location.href + "\n" + "\nIf the server names do not match, this may be a spoof.");
A small window like this will pop up:
Obviously, if the URL's don't match, get out of Dodge!
Original Post