Field note / After the click
Start with what happened.
Not a guess from the URL.
LinkLens cannot determine whether a device or account was compromised. A URL alone does not reveal what the page did or what information it received.
If you only opened the page
Close it and avoid further interaction. Note whether anything downloaded, whether you granted permissions or whether you typed information. Keep your browser and device updated. A click alone is not enough information to declare either compromise or safety.
If you typed a password or sign-in code
Use the service's known app or official recovery process to secure the account. Do not reuse the suspicious link. For a work account, contact your security or IT team promptly through a known channel. Tell them what you entered and when.
If you shared financial or identity information
Contact the relevant bank or service through known contact details. For US identity-theft recovery, the FTC points people to IdentityTheft.gov. Outside the US, use your local fraud reporting and identity-protection services.
If you downloaded or ran something
Do not run a downloaded file to investigate it. If harmful software may have downloaded, the FTC recommends updating security software and running a scan. If you ran commands, installed software or granted remote access, get device-specific help from your organization's IT team or a trusted support provider.
Keep a useful account of the event
Record the time, the message's claim and what you clicked, typed, downloaded or allowed. Preserve evidence according to your organization's process. Do not post reset links, passwords or personal identifiers in a public help forum.
This is educational triage, not a diagnosis. LinkLens never inspects your device, account, browser session or downloaded files.