Everyone knows it, but to avoid phishing website is pretty hard, also for the advanced users.
They are using a fake website with a special spot that you don't even have to see.
To tell you my experienced, last month was a hell for me. I accidentally click referal lnk from a certain user in the gambling site account without thinking how risky to register on that website. One day has passed and my account was hacked. A lesson learned from that experienced. Always set 2fa in all important sites and do not click any websites without checking the real url link.
I see that this is common in the gambling site, I really didn’t know that people gamble a lot, till I started playing one, too, and I find myself checking out different gambling sites to see which of them can bring luck to me, and severally, I have clicked on lots of phishing sites there too and some of them have also tried doing this to me to the extent of trying to hacked my local exchange account.
That shows how bad they are, but luckily for me, I had put so many security measures in place too like that of 2FA factor which has saved me several times, despite the very strong password that I am using, they still tried resetting my password, so I agree with you that this is very necessary, I have it on virtually all my applications that has an option for it, to even most of all my emails, especially Gmail.
