Locate the hostname, not just a familiar word
A URL can include a scheme, hostname, path and query parameters. A brand word can appear in a path without being the domain. In https://research.example/operator-a, the website is research.example. In https://operator-a.example/research, the website is operator-a.example. The position of the words changes what they identify.
Subdomains also need care. In https://operator-a.research.example, the hostname belongs under research.example, not under operator-a.example. The familiar word at the beginning is not enough to establish the destination you intended. You do not need to become a network engineer to make this check: focus on the complete hostname rather than whichever fragment is most recognisable.
On a small screen, interfaces sometimes shorten addresses. Expand the address bar when identity matters. Do this after the destination has finished loading, because the final address may differ from the one you initially tapped. A screenshot of the search result alone cannot tell you what address the browser ultimately reached.
Treat HTTPS as one technical signal
An HTTPS connection relates to the connection with the displayed hostname. It should not be read as a licence certificate, an endorsement of the operator or proof that a promotion is fair. A secure connection and a supported business claim answer different questions.
For example, a hypothetical site can use HTTPS while publishing an outdated withdrawal policy. The technical connection does not make the policy current. Equally, a valid-looking policy cannot repair a hostname mismatch when you intended another service. Keep transport, identity and content accuracy in separate parts of your assessment.
Before entering credentials, payment details or identity information, resolve any unexpected destination. Do not submit sensitive data just to find out whether the page is genuine. If you already have an account, return through a previously established route and use the service's appropriate support channel for uncertainty about its domain.
