I might not recognize the address. But `whois 12.34.56.78` will tell me whose network it's on. Anything other than my hosting provider would be a red flag. If i

I might not recognize the address. But `whois 12.34.56.78` will tell me whose network it's on. Anything other than my hosting provider would be a red flag. If it's the right company but the site still looks wrong, I'd try to SSH, which would fail because known hosts (see adjacent comment) and also authentication would fail. Then I'd reach for the VM console inside my hosting provider's site, and see the correct/expected address there, and hopefully realize what's up. You could also check your DNS provider, assuming that hasn't been compromised. It can be a good tradeoff to know where/how to find information rather than actually knowing the information.