Possible Malicious link

[bjm]

@MattPat

I forgot this link
https://shopping.yahoo.com/mailpp/directly?[...]
It showed up in an email.

Note: characters after the question mark are local instructions.

In an email link, the characters following the question mark (? ) are known as the query string. This string contains optional parameters that pre-fill specific fields in an email when the link is clicked.

The information after the question mark is officially called the query string . While calling it “local instructions” isn’t a standard industry term, it is a helpful mental model because that data is typically processed by a local application (like your email client) or a specific web page rather than being part of the primary address used to find a server.

Note: posting an entire URL with a query string is a security risk if it contains any private or sensitive data.

@MattPat

https://shopping.yahoo.com/mailpp/directly

[MattPat]

Even if it took me to a Google page?

[bjm]

@MattPat

Even if it took me to a Google page?

• https://transparencyreport.google.com/safe-browsing/search
• https://www.eset.com/us/home/link-checker/
• https://nordvpn.com/link-checker/
• https://www.bitdefender.com/en-us/consumer/link-checker

[MattPat]

Thanks. But will the links be able to check for fake google pages?

[bjm]

@MattPat

But will the links be able to check for fake google pages?

To check if a Google page or website is fake, you can use official verification tools and look for specific technical and visual red flags.

Use Official Google Verification Tools
Google provides several free tools to check a website’s safety and indexing status:

• Google Transparency Report (Safe Browsing Site Status): Paste any URL to see if Google’s automated systems have flagged it as dangerous for hosting malware or phishing content.
• URL Inspection Tool (for Site Owners): If you own the site, use Google Search Console to see how Google crawls and indexes your pages. This helps identify “ghost” or fake pages that shouldn’t be on your domain.
• Google Fact Check Explorer: Use this to search for known scams or debunked claims associated with a specific entity or website.

Inspect Technical Indicators

• Double-Check the URL: Scammers often use “typosquatting” (e.g., amaz0n.com instead of amazon.com) or strange domain extensions like .biz or .info.
• Verify the SSL Certificate: Click the padlock icon next to the URL. A valid certificate ensures the connection is encrypted, but note that many modern phishing sites now use free SSL certificates. Look for “Organization Validation” (OV) details, which are harder for scammers to obtain.
• Check Domain Age: Use a WHOIS Lookup tool to see when the domain was registered. Fake sites are often very new (days or weeks old), whereas legitimate brands have established histories.

Identify Visual and Content Red Flags

• Grammar and Spelling: Professional companies typically have strict editorial standards. Multiple typos, awkward phrasing, or generic greetings (e.g., “Dear Valued Customer”) are major warnings.
• Design Quality: Look for low-resolution or pixelated logos, broken links, or “too good to be true” deals (e.g., 90% off designer goods).
• Missing Contact Information: A legitimate business should provide a physical address, a phone number that works, and a clear privacy/return policy.
• Invasive Ads: An overabundance of pop-ups or ads that cover the entire page often indicates a malicious site.

Spotting Fake Google Reviews
If you are checking if a Google Business Profile is real, look at its reviews:

• Generic Language: Reviews that are vague and could apply to any business might be AI-generated.
• Sudden Spikes: A rapid influx of positive reviews over a very short period is a common sign of paid manipulation.
• Geographic Inconsistency: Check the reviewer’s profile; it is suspicious if they review businesses in widely distant global locations on the same day.

If you encounter a page you believe is a scam, you can report it to Google Safe Browsing to help protect others.

Note: AI sourced content may make mistakes

[peterweb]

@MattPat

Thanks. But will the links be able to check for fake google pages?

Or don’t click on any links in any email. If you know what the link is supposed to address, go directly to that web site by manually typing in the address into your browser. Then there is no question about using a fake link.