@h5e @ansuz Yes, and in the case of the queuing system I mention, they use a 3rd party provider so the app provider url is something completely different than the care provider url... and this still doesn't make people think twice.
And don't get me started on payment gateway urls... people just trust any form fields where your credit card number is asked for.