Methods for Hiding Malicious URLs
Attackers mask phishing pages behind chains of automatic redirects using legitimate URL shorteners or compromised blogs. Browser security mechanisms don't always block the navigation in time if the destination address was registered just a few hours ago.
Safe Link Checking Procedure
- Copy the suspicious address via the browser's context menu without opening it.
- Check the final destination using specialized redirect un-shortening services.
- Scan the resulting domain through VirusTotal or phishing threat databases.
- Pay attention to the domain creation date via Whois services: fresh addresses carry the highest risk.