How to verify you are on the official GEMPAK99
The first test takes the address apart. Read it slowly, one character at a time, the way you would check a bank account number rather than glancing at it — a swapped letter, or a 1 standing in for an l, slides past a quick look but never past a slow read. Then set it beside the address you already trust for GEMPAK99 and hunt for a single difference — one is enough. If anything fails to line up, stop before typing a thing.
The second test is a small experiment you can run before you commit anything. Go as far as the sign-in screen and read exactly what it demands. On the real one, your usual username and password are the whole of it; the moment a screen adds a code, a "second password", or a "confirm your account" box, you have your answer — and you never had to finish signing in to know it.
The third test is the one you cannot quite put into words. If the page loads in a font you have not seen here, a button answers a beat too slowly, or the spacing feels a fraction tight, that low-level sense that something is off is data, not nerves. Forgers reproduce the words easily but almost never the whole feel, so act on the mismatch before you can explain it.

