Beware Before You Click: The Dangers of '@' in URLs

In the digital age, where a click can lead you anywhere on the web, caution is paramount. Among the myriad of links that populate our screens, there's one particular symbol that should raise a red flag: the '@' sign in a URL. While the internet offers boundless opportunities for information and connection, it also harbours risks, and these seemingly innocuous characters can be a gateway to trouble.

I came across this article the other day and it detailed something I wasn't aware of.

https://chriscoyier.net/2023/05/22/if-youre-trying-to-trick-people-into-thinking-a-domain-name-is-legit-and-definitely-not-harmful-just-put-google-com-in-front-of-it/

So where does this link go :-

https://www.bbc.co.uk.news.england.south.yorkshire@quad.co.uk/links/not-the-page-you-wanted.htm

At first glance (and certainly if you only saw the first 50 characters) you'd be forgiven for thinking that you would end up on the BBC's website.  Hover over it first, then give it a click to see the answer.  You may find that your browser gives you a better idea of where it's going when you hover over it.

So it's worth being vigilant.  Of course the bit after the @ sign might be less obvious.  And what if there are more than one @ symbols :-

https://www.bbc.co.uk.news.england.south.yorkshire@www.scci.org.uk.account.chamber-events@quad.co.uk/links/not-the-page-you-wanted.htm

Remember, in the virtual realm, a single click can have far-reaching consequences. Stay vigilant, exercise caution, and think twice before you click on any link, especially those with an '@' in the URL. Your digital safety depends on it.

Comments

Post a Comment

Popular posts from this blog

Telephone Scam - Caller Claims to be from Microsoft

We've become aware of an increasingly common scam which has taken in a number of our customers as well as hearing word of it from family and friends. One of our engineers also had the scam call, so we were able to gain first-hand knowledge of what happens. The scam is well-documented here on The Guardian's website but we also know that more stubborn recipients of the call (like our engineer) will be asked to perform other so-called checks (like CheckDisk/CHKDSK) to see how your PC is running in addition to looking at the Event Viewer. These routines always display something designed to alarm you and to make you think something is wrong with your PC. You're then asked to go to a website where the caller can then fix these for you. People are then directed to payment websites in order to pay for the service. However, the caller will often remain connected to your PC, disabling your anti-virus protection and installing trojans and key-loggers. They'll then get access to c...
Read more

Some Useful Videos About Cyber Security

Image
 As we come to the end of cyber awareness month, we thought we'd share a couple of useful resources that you might find useful.  If you have any questions, please feel free to get in touch. Multi-Factor Authentication Sometimes called MFA or 2FA (two-factor authentication) Protection From Malware and Ransomware Tech Support Scams Phishing Working Remotely - Securely We hope you found those useful.
Read more