SESKStuff Everyone Should Know
SESK: Stuff Everyone Should Know · sesk.info/sec-lookalike-domain

CISA gives amazan.com as an example of what phishing red flag?

An incorrect address or link that looks almost right.

Start playing free

  1. A very long email subject line
  2. A message sent after business hours
  3. A misspelled email address or link ✔

Why: Scammers register names that look right at a glance, like amazan instead of amazon. Slow down and read the whole address letter by letter.

Huh, didn't know that: Microsoft also warns about very subtle misspellings of a legitimate domain name.

The dad joke
Why did the computer get glasses? To improve its websight.
Like this card?
Play the game

References

Answer: A misspelled email address or link. Scammers register names that look right at a glance, like amazan instead of amazon. Slow down and read the whole address letter by letter.

  1. CISA: Recognize and Report Phishing www.cisa.gov/secure-our-world/recognize-and-report-phishing
    Incorrect email addresses or links, like amazan.com
    Checked 2026-10-10.
  2. Microsoft Support: Protect yourself from phishing support.microsoft.com/en-us/windows/protect-yourself-from-phishing-0c7ea947-ba98-3bd9-7184-430e1f860a44
    Be watchful for very subtle misspellings of the legitimate domain name.
    Checked 2026-10-10.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game

Security & PrivacyWhy does CISA call untrusted shortened URLs a phishing warning sign?Security & PrivacyThere's a QR code sticker on the parking meter. What's the smart move before you pay?Security & PrivacyA website shows a padlock and https. What does that tell you?

That's stuff everyone should know.