The component of the URL you check when avoiding phishing attack (the domain) is still displayed.