Where does this URL actually go?

Phishing rarely needs a convincing domain — it needs a URL that reads right. Paste one and see which part a browser actually obeys.

Your input never leaves your browser. There is no server to send it to — this page has no backend and stores nothing.

Try these

• brand in the userinfo
• TLD inside the subdomain
• brand in the path
• punycode lookalike