The first result looked right: www.signin.samsung.com.key
She didn’t know the technical details, but she remembered a friend’s warning: “Scammers buy domains that look real by adding extra words or dots before the real company name.” www.signin.samsung.com.key
She clicked. The page loaded perfectly — Samsung logo, blue theme, email and password boxes. It even showed a lock icon next to the address bar (because the site had HTTPS). The first result looked right: www