10 ways to find out if a website is real or fake
Published: 2021-12-09 17:58:27

## 1. Verify if the Website’s have a  Trust Seal
A trust seal attempts to communicate to you as an end user that the website they’re on is safe, and that the business itself views security as a priority. 
A trust seal is a seal granted by an entity to websites or businesses for display. Often the purpose is to demonstrate to customers that this business is concerned with security and their business identity. If a trust seal is legitimate, clicking on it will take you to a page that verifies the authenticity of that seal

## 2.Does It Have the Padlock with HTTPS? Did You View the Certificate Details?
HTTPS merely means that the communication channel between you and the server is encrypted and secure (i.e., an attacker listening in on the network will get garbled encrypted information that won’t make sense). HTTPS does not assure that the server you are communicating with will not steal your data. If the server is itself malicious, the S in “HTTPS” will do very little to ensure security.
Look at it this way: While it’s a no brainer that if your browser flags a website as “not secure,” no sensitive information should be entered on the page. But even if the site uses HTTPS, it doesn’t automatically guarantee safety. This is why SSL/TLS certificates offer different validation levels.

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/amugxjpajbhyd8u4mc5d.png)

##  3. Check Whether the Company Has a Social Media Presence Online
Today's companies have some level of a social media presence. Fake websites sometimes have the icons for Twitter or Facebook, Instagram but the graphics don’t actually link to a real account. Read company reviews on such platforms and see if you can find real employees of the company on LinkedIn.

## 4. Never Click on Links Within the Body of an Email If You Don't have Any Business with It
Have you ever ask yourself why most email provider advise you not to click on any link you never request for?
Unless you requested a password reset link, there’s almost never a compelling reason to click on links in your email.
If PayPal was writing to you, they would know your name and use proper grammar. They’re not going to refer to you as “member” or “customer.” Furthermore, not in a million years would they threaten to suspend your account forever with a poorly written email, use urgent or threatening language, or ask you to provide personal or account information.
By just hovering the mouse over the login button, you should be able to see the actual link where you would get redirected. Remember that once you hit login, it might take you to a site that looks eerily similar to the original PayPal website. But the moment you enter your credentials, there’s a very good chance that your account will get compromised or your account details will be sold.

## 5. Use the Google Safe Browsing Transparency Report
When in doubt about a website’s safety, head over to the Google Safe Browsing Transparency Report This tool allows you to enter a URL to check whether it hosts any malware or if the site is safe for browsing.

## 6. Check for a Website Privacy Policy
Most countries and industries have data privacy laws and regulations that make it mandatory for a website to let their users know how data is collected, used, protected, and stored. This process is usually achieved by writing a privacy policy document and getting users to read them and agree to the terms and conditions. By now, most of us have skimmed through enough privacy policies to know what a decent one looks like in contrast to one that pretends to be an authentic document. 
Apart from the privacy policy, if you’re on an e-commerce platform, be sure to read their shipping and return policies. This is always a great method of telling website a website is legit or fake. If the website lacks one, or if it looks unpolished at best, rethink your decision to make any purchase from such a dubious site.

## 7. Pay Close Attention to the URL
Check that the website isn’t attempting a homograph phishing attack. Browsers can be tricked into displaying fake domain names as trusted legitimate sites such as a domain registered as xn--pple-43d.com is displayed as apple.com.

URLs can be manipulated using alphabets that appear similar from other foreign languages such as the Cyrillic alphabet. The URL can be designed to look a certain way using subdomains, but if inspected closely, the name of the actual domain is appears right before the TLD. A simple way to identify whether a URL is a homograph phishing attack is to copy and paste the URL in another tab. When pasted on the address bar the URL appears as “https://www.xn--80ak6aa92e.com/” before you hit enter and load the site.

## 8. Know the Obvious Signs of Website Malware
Web defacement attacks, suspicious pop-ups, and advertisements that attempt to entice you to click on them typically are indicative of malicious websites egging you on to
download and execute some malware on your system. Be wary of websites that redirect you to other sites with promotional content or to a legitimate looking page asking you to enter sensitive information. Always exercise caution when clicking on any ads!

## 9. Check the Contact Page
Our third recommendation for how to tell if a website is legit is to verify whether the website has a physical address. Does the company have a phone number listed and an email ID? Try sending an email to the ID provided on the contact page and check if it gets delivered. Verify that the email is not a generic one (such as xyz@gmail.com) but one that comes with the company brand (such as name@companydomain.com).

## 10. Look for Spelling or Grammatical Mistakes. Is There a False Sense of Urgency?
These are all telltale signs of a phishing attack. Most legitimate companies make an effort to ensure minimum quality standards in all communication that leaves their desks. Apart from rare genuine typos, it’s highly improbable that you will ever receive a poorly worded email from an Apple or a Microsoft. All communications from legitimate companies will have an appropriate tone and will never sound menacing or threatening, even if you don’t follow through with their call to action.
If the website looks like it was designed by some seven-year-old who is learning to draw, or if it has glaring grammar issues, chances are that it’s a malicious website and you should avoid it at all costs.  

## EXTRA
Check The Website On GOOGLE If There Is Any Complain About The Website 

## Security Add-Ons and Tools
In addition to the steps we outlined above for how to tell if a website is legit, there are tools and add-ons that can help you stay safe online as well.
Services like Norton Safe Web and Virus Total analyze URLs and tell us if the site we are interested in visiting is safe or malicious. Apart from the aforementioned precautionary steps, a few extensions and tools can also come in handy to keep us from visiting fake websites.
1.	Netcraft Extension: This tool allows you to do a quick lookup of the sites you want to visit and provides protection against phishing.
2.	Disconnect: This tracker blocker lets you see everything that tracks you on a website and allows you to disable them.
3.	Webroot Filtering Extension: This tool keeps you safe by blocking and filtering out dangerous websites.
4.	Privacy Cleaner: This application runs in the background and alerts you if a page or an app tries to access your files and information.