We\u2019re always telling people to avoid clicking on suspicious links, but the bad guys are making it harder to tell the difference between a legitimate URL and a suspicious one. We\u2019re going to try to simplify it for you, and have you focus on the placement of a single punctuation mark in a link to tell if it might be safe or dangerous.<\/p>\n
<\/p>\n
Let\u2019s make up a fictional company that becomes a massive global retailer and multimedia company, as well as a household name. We\u2019ll call our fake enterprise Flimflamazon<\/em>.<\/p>\n Our totally made-up Flimflamazon has a million billion products and services, and users log in to buy and sell products, manage their payments, run advertising campaigns, customize their own personal Flimflamazon user profiles, watch Flimflamazon movies that were shot exclusively by Flimflamazon Studios, manage their Flimflamazon Web Hosting accounts, and Flimflamazon is proud to announce that patients can now log in to their Flimflamazon to receive telehealthcare from our licensed Flimflamazon doctors and nurses.<\/p>\n Our slogan is Flimflamazon; Everything is Here.<\/strong><\/p>\n Because Flimflamazon has become the world\u2019s most trusted online retailer, and one of the largest marketplaces and distributors of content, people generally trust it. Just like our ads say, before Flimflamazon, buying products online and consuming media was challenging.<\/p>\n As fun as this is, I think that\u2019s enough world-building for this example. You get the idea. Flimflamazon is, much like companies such as Facebook, Amazon, and Google, huge, multi-faceted, and generally known and trusted by the public.<\/p>\n Like Facebook, Google, PayPal, and Amazon, Flimflamazon\u2019s massive success leads to Flimflamazon users being constantly scammed by cybercriminals to try to trick them out of their money and sensitive information.<\/strong><\/p>\n So Flimflamazon users get a lot of email from Flimflamazon. They get emails about products they should buy, account notifications, and receipts. They get emails about their transactions and the products they are trying to sell. They get offers and alerts and everything in between.<\/p>\n All a cybercriminal has to do is make an email look like a typical Flimflamazon email. They can steal the branding and do some technical spoofing to make the email look like it\u2019s coming from one of the dozens of legitimate Flimflamazon email addresses.<\/p>\n They can then include links that look like they go to Flimflamazon, but actually lead the user to a similar looking URL that the cybercriminals purchased and control. <\/p>\n It only costs a few dollars and a little time to create a web page that looks legitimate. A cybercriminal could purchase Flinflamazon.com (notice the subtle spelling difference?) or Flimflamazoncustomerservice.com or a whole slew of other simple tricks to look like they are a legitimate company. It\u2019s up to all of us<\/strong> to be aware of what to look for so we don\u2019t get scammed.<\/p>\n The links that take you to scam pages exist to steal your information and money, and while the destination might look legitimate, once you go to the scam page of a phishing attack, it might already be too late to look for other potential warning signs.<\/p>\n While this is going to change a little from one application to another, typically you can see the destination of a link by hovering your mouse over it. Most email clients and web browsers will tell you exactly where the link is going to at the bottom of the page.<\/p>\nWhen Users Feel Safe, Cybercriminals Have an Edge<\/h2>\n
How to See the URL Destination of a Link In an Email, Chat, or Other Correspondence:<\/h2>\n