TryBench
Digital Safety & Security Tasks · Foundation lesson 4 of 17

Inspecting Links & Domains

Separate deceptive display text from actual web addresses and understand padlock limitations.

Why this matters

One click on a fake link can steal your password. Knowing how to read a web address tells you who really owns a website.

Attackers hide links behind lookalike names. Read the address from the right, up to the first slash, to find the real owner, such as "verify-login.top".

In real life: Find the part between :// and the next /. Read it from right to left. The last two parts (or three, like .com.ng) show the real owner. Anything before that is just a name the owner picked.

The padlock only means your connection is private. Anyone can get one for free, including scammers, so it does not prove a site is safe.

In real life: A padlock on a shop door shows that the door is locked. It does not show that the shop is honest. A scam site can have a padlock too.

Padlock = encrypted pipe. It does NOT guarantee the destination is legitimate.

Your practice task

Hover over each link to see where it really goes. Decide which destinations are safe, then name who owns the scam site.

How to do it

  1. Read the tip on how to read a link in the box above.
  2. For each link, compare what it shows with where it really goes.
  3. Pick SAFE or PHISHING, then answer who owns the scam site.
  4. Press Run proof.

Practice it for free in the app. You get instant checks that show what you got right and what to fix. A lesson takes about two minutes and you can try as many times as you like.

Quick reference: URL Inspection Rule

Detects deceptive lookalike domains and typo-squatted URLs.

Read the host right-to-left. In payquick.ng.verify-login.top, the true owner is verify-login.top.

Practice this lesson free

More lessons in this course

See all 17 lessons in Digital Safety & Security Tasks