If I got a phishing email it might ask me to login to my Halifax Bank account and provide a link. This link could be to Halifax.com.sh.ly/login or some such thi

If I got a phishing email it might ask me to login to my Halifax Bank account and provide a link. This link could be to Halifax.com.sh.ly/login or some such thing. As an end user I might see the Halifax part of the url at the beginning of the address and feel comfortable entering my credentials. If this was hidden and all I saw was sh.ly then I'd know I was on the wrong website. You and I might be comfortable seeing that from the address bar right now but I expect 80% of users would struggle to see that.