Is that website dangerous? Take the fake-spotting quiz

Summary

In this video, Mark Decker discusses the dangers of malicious websites and how to identify them. He explains the two main types: hacked sites and fake sites designed by criminals. The video details how these sites can steal personal information, install malware, or redirect users to harmful locations. Key tips include reading URLs carefully, watching for red flags like decoy domains, shortened URLs, and misspellings. Decker also offers advice on what to do if you accidentally interact with a malicious site, such as closing tabs and changing passwords immediately.

Takeaways

• ⚠️ There are two main types of malicious websites: hacked sites and fake sites. Hacked sites are legitimate websites taken over by criminals, while fake sites are created specifically for malicious purposes.
• 🔐 Malicious websites may capture personal information, redirect you to harmful sites, or try to install malware, sometimes automatically or by tricking users into installing it themselves.
• 🧐 You can spot a malicious URL by carefully reading it. Look for hidden or fake links and verify the true destination before clicking.
• 🔗 Shortened URLs like bit.ly or tinyURL can be dangerous since they obscure the final destination. Use tools like LongURL.org to expand and check them.
• 👀 Hovering over a hyperlink can reveal the true destination, which often appears as a tooltip or in the browser's status bar.
• 🔍 You can use site-checking tools like Sucuri Site Check to scan a suspicious link and confirm whether the website is blacklisted or dangerous.
• 🌐 The key to reading URLs is finding the first single slash and identifying the real domain by looking two dots to the left. Anything after the first slash can be a decoy.
• ❌ Be wary of decoy domains and subdomains. Even if a URL contains a legitimate-looking name like amazon.com, the real destination may be hidden behind a different domain.
• 🛑 Watch for common tricks like missing dots, misspelled domain names (e.g., amazom instead of amazon), and misleading subdomains or top-level domains like .biz or .info.
• 🔄 If you've visited a malicious site, close all tabs, run a virus scan, and if you entered any personal information, change your passwords immediately—preferably with unique passwords for each site.

Q & A

What are the two main types of malicious websites?

The two main types of malicious websites are hacked sites, which are legitimate sites hijacked by criminals, and fake sites, which are bogus websites set up by criminals to perform malicious activities.

How can a hacked website be dangerous?

A hacked website can be dangerous because it might redirect you to a malicious site, try to capture personal information, or install malware on your computer.

What are some common tricks that malicious websites use to deceive users?

Common tricks include fake security warnings, prompts to install software under the guise of fixing a non-existent problem, and phishing schemes where users are asked to verify personal information.

How can you identify a fake URL?

You can identify a fake URL by carefully reading the web address, checking for hidden or misleading links, and analyzing the domain name structure by backing up two dots from the first single slash in the URL.

What is a shortened URL, and why should it be treated cautiously?

A shortened URL, such as those created by services like bit.ly, hides the true destination of the link. It should be treated cautiously because it could lead to a malicious website.

What tool can be used to expand a shortened URL?

A tool like longurl.org can be used to expand shortened URLs to reveal the true destination.

What should you do if you encounter an unfamiliar or suspicious link in an email or website?

You should hover over the link to check the true destination, or right-click to copy the hyperlink and use a site checker like sucuri.net to scan the website before clicking.

What is the significance of the first single slash in a URL?

The first single slash in a URL is significant because it helps identify the true domain. By backing up two dots from this slash, you can reveal the actual domain name and ignore misleading subdomains.

Why is it important to be cautious of top-level domains (TLDs) like .biz or .info?

Top-level domains like .biz or .info are often newer and less regulated, making them more likely to be associated with malicious websites compared to well-established TLDs like .com or .org.

What immediate steps should you take if you accidentally visit a malicious website?

If you visit a malicious website, close all browser tabs and windows, run a virus scan to check for malware, and if you entered a password, go to the legitimate site and change your password immediately.