Fix this week

A link on your page points to a look-alike address

This is the exact wording EverThread uses when it finds this on a customer's site, written for someone who runs a business, not a server. The example site here is yourbakery.com.

What we saw

A link goes to https://xn--pypal-4ve.com/login that uses special characters to look like another site.

Why it matters

This is the classic phishing trick. If you did not add it, someone else did.

How to fix it

Check the link below. If you do not recognize it, ask your developer to remove it and look for how it was added.

For your developer

Punycode/IDN link: https://xn--pypal-4ve.com/login. Verify intent; remove if injected.

Does your site have this?

Check it free, right now. We look at your home page the way a browser does and tell you in plain English. No account.

Or sign up free and we check it every day and email you when something changes.