how to not fall for phishing attacks: 0. remember you can't be hacked just by clicking on links you can only be hacked if you actively enter your password and 2FA code in places you're not supposed to 1. always read the URL you click on the url in the the current phishing messages is postdmca-x. com do you think anyone from X will use that random domain? they'll only use the official domain. if you read the URL you basically avoid 99.99% hack attempts. 2. never enter your real password in any form if you still feel convinced, just submit with a wrong password if it still "logs you in", you know you just saved your ass from a hacking attempt why? because a phishing form will always accept any password input as successful, because it doesn't really know the correct password only the real server knows your actual password and will give you an "incorrect password" error