These companies want us to reduce phishing, etc attacks by being smart and looking at URLs before we click on them. Then they obfuscate them constantly like thi

These companies want us to reduce phishing, etc attacks by being smart and looking at URLs before we click on them. Then they obfuscate them constantly like this so we can't see the actual URL. Then they wonder why phishing attacks constantly keep working. This is every single company. Just trying to log into my doctor's patient portal, I go to my doctor's website, which redirects me to some weird 3rd party URL, which sends me to some authentication URL, then finally to the patient portal after I login, which is back to another URL. And the business names are never in the URLs. It's always "mypatientportal" or some URL with some old business name from a company that got acquired. The most annoying thing is these fuckers keep blaming the users for getting phished. Just keep training the users. More training. More training that doesn't seem to be helping for some reason. But here's more proof that they put metrics and data gathering over actual security. People need to learn how URLs work for fucks sake and start pushing back against their company when they do this shit. It always goes ignored everywhere I work.