Field notes
Better questions
before the click.
A few distinctions make unfamiliar links easier to read. None turns a URL into proof that a website is trustworthy.
- What is the actual domain in this link?
Hostnames, @, subdomains and internationalized names.
- Does HTTPS mean a site is legitimate?
Separate connection privacy from the identity behind the page.
- Should I put a private link in a URL scanner?
Reset tokens, embedded destinations and scan visibility.
- I clicked. What information did I share?
Choose a response based on what actually happened.