Does this mean you verify EVERY domain you use? How to even do that?
Shouldn’t this be solved some other ways?
Shouldn’t this be solved some other ways?
This is also easily avaidable by using password manager which will not autofill credentials on a page with a wrong domain.
Edit: And yes, I do this for every link emailed to me that does anythig more high stakes than point me to a newsletter article.