⚠ WARNING ⚠

untrusted.site

You were told to stop going to untrusted sites.

And yet, here you are.

GET ME OUT OF HERE (recommended) I ACCEPT ALL RISKS

Visitor Threat Assessment

> checking: read the domain name before visiting ....... [FAILED]

> checking: hovered over the link first ................ [SKIPPED]

> checking: verified who operates this site ............ [NOT EVEN ONCE]

> checking: visited a site literally named UNTRUSTED ... [CONFIRMED]

> verdict : you are why phishing has a 3% click rate ... [STATISTICALLY]

> but hey : you can fix that in five minutes ........... [SCROLL DOWN]

Actual Internet Hygiene

Since you're here anyway — these are real links to real resources. Ironically, this may be the most trustworthy page you visit today.

01 Inspect before you click

Hover first. Read the domain right-to-left: login.yourbank.com.evil.biz belongs to evil.biz, not your bank.

CISA: recognize & report phishing →

02 Think you can spot a phish?

Most people who are sure they can, can't. Take the quiz and find out — it's genuinely humbling.

Google phishing quiz →

03 Turn on MFA

A stolen password with MFA is a locked door with no key. Enable it everywhere that matters: email, bank, socials.

CISA: turn on MFA →

04 Check if you've been breached

Your email is probably in a breach dump somewhere. Find out which ones, then change those passwords.

Have I Been Pwned →

05 Use a password manager

Unique password per site, or one breach unlocks your whole life. Let software remember them; you only need one good one.

CISA: strong passwords →

06 Update your software

That update you keep postponing patches holes attackers already know about. "Remind me tomorrow" is a threat model.

CISA: update software →

07 Report the scams you see

Reporting phishing and fraud actually works — it feeds takedowns and warnings that protect people less careful than you.

FTC: report fraud →

08 Level up your privacy

When you're ready to go deeper: a calm, practical guide to defending yourself against surveillance, written by the EFF.

EFF Surveillance Self-Defense →

What is this place?

Someone at work joked, "you need to stop going to untrusted sites." So naturally, we registered untrusted.site within the hour. This is the only website on the internet that is completely honest about how much you should trust it.

It exists to make one point: trust is a decision, not a default. You clicked a link to a domain called "untrusted" — probably without thinking about it. That reflex is exactly what phishing, typosquatting, and malvertising are built on.

Over time this domain will grow into a live security-awareness lab: demonstrations of what bad DNS hygiene looks like, examples of how easy it is to look legitimate, and training material for people who want their teams to stop clicking things. If a suspicious email ever claims to be from anyone@untrusted.site — well. You were warned. Twice. It's in the name.