News!! The Single-Slash Double-Dot Govern For Identifying Spam Links Inward Phishing Emails

This article is virtually e-mail phishing, inwards improver to spam-links inward emails: how you lot sack recognize them inwards improver to what to exercise virtually them.

Understanding Spam vs Phishing

Most people know what regular spam is. Phishing is a to a greater extent than sophisticated type of spam, which combines information that the spammer knows (or guesses) alongside conventional spam techniques. Often phishing emails are addressed straight to you, inwards improver to offering a "product" or "service" that you lot powerfulness realistically want. For example, they may offering to create a security piece of job alongside your on-line banking (just as shortly as you lot convey gone to their website inwards improver to given them your existent on-line banking details).

Bloggers are especially susceptible to phishing emails, because we write websites where we pct information virtually ourselves. For example, anyone who reads Amazon Associates inwards improver to Chitika, inwards improver to that I convey a domain hosted alongside DomainDiscount24. It's non much harder to motion out that I'm interested inward folk-music, inwards improver to know a lot virtually public behave inward my city. And fifty-fifty though I don't display my e-mail address on the blog, it isn't that hard to jurist from closed to of the screen-shots I use, or by subscribing to my RSS feed. And you lot powerfulness concord upward fifty-fifty to a greater extent than vulnerable if you lot link your spider spider web log to your Facebook profile instead of a Page.

Protecting yourself from Phishers

ISPs inwards improver to e-mail services let on inwards improver to delete nigh regular spam emails before they are delivered. But this is harder to exercise alongside phishing emails, because they oftentimes aspect genuine. So you need to protect yourself against phishing.

The best way to exercise this is to concord upward curious-and-cautious virtually whatever e-mail you lot receive. There are lots of suggestions below virtually what this means, inwards improver to what characteristics to aspect for. None of them sack laissez passer on a 100% for sure as shooting answer virtually whether a message or offering is dodgy. But beingness aware of the cast of things you lot need to check, inwards improver to in particular the "single-slash-double-dot" govern for checking links, is a an splendid start.

How to location phishing emails

An e-mail message may concord upward a phishing endeavor if some of the adjacent are true:

You were non expecting the message, or whatever contact from the scheme it apparently comes from.

You've never heard of the scheme or companionship that it comes from - or you lot don't convey whatever dealings alongside them.
(That said, sometimes unknown organisations exercise contact you lot - endeavor out to works their legitimate website or telephone number from closed to other source, to banking society cheque if they're "for real" or not).

The message asks you lot to confirm trace scheme human human relationship details yesteryear times giving closed to personal information: no reputable companionship testament e'er wishing you lot to exercise this yesteryear times email. Intelligent reputable companies testament non await you lot to exercise inwards improver to thence yesteryear times clicking on links inward their website.

The message tries to build you lot answer quickly, to halt something bad from happening. (Basically, they're trying to halt you lot from thinking virtually the message before you lot answer to it.)

An e-mail doesn't convey your address inward the To state - or it has your address inwards improver to many others which you lot don't know.

The message-body doesn't start alongside your scream (eg if it says "Dear Customer" instead of "Dear Joe Soap")

The from address, or the scream as the bottom of the message (like the "signature" inward a paper-based letter) is missing, or seems unusual given where the message came from.

Bad spelling. Bad grammar. Poor formatting. Odd looking graphics / pictures / logos. Strange sentence structures (either to endeavor out to fox you, or because the author doesn't know your language well).

None of those features guarantee that a message is dodgy. But whatever of them should concord upward enough to build you lot a lilliputian suspicious.

But at that topographic dot are closed to features that are to a greater extent than of a give-away:

The URL / hyperlink inward the message isn't the right ane for the companionship (eg it's from www.ebay.org instead of www.ebay.com)

The message contains a link which doesn't tally the website demo when you lot hover the mouse over it eg www.amazon.com - notice that it's linked back to Blogger-HAT instead of to the existent Amazon.
NB Even if a link looks similar a link, ALWAYS banking society cheque where it goes to yesteryear times hovering your mouse over inwards improver to seeing what the "tool tip" text is.

The message uses an URL shortening service (eg tinyurl.com, bit.ly, goo.gl) which stops you lot from checking where the link truly goes.
(This is a goodness combat why you lot shouldn't piece of job link shortening services yourself: they teach inward aspect similar you lot convey something to hide. Whenever I tweet virtually a post, I e'er ready inward the full URL: fifty-fifty though Twitter doesn't display all the characters inward the message, they are available to anyone who hovers over the link).

Influenza A virus subtype Influenza A virus subtype H5N1 unproblematic govern for evaluating links:

The finally iii points are the nigh helpful - but they rely on you lot beingness able to look at a website-link inwards improver to know if it's spammy or not.

And spammers know that it's slow to confuse people yesteryear times showing them long, complicated existent links, that superficially aspect similar existent ones. For example, consider

www.cnn.com.newslist.2013-01.headlines.trouble.com/headline-listing/xx03/index.html

Lots of people testament aspect at this, meet the "cnn.com" inwards improver to think "ahh, that's a reliable intelligence site, it must concord upward fine." But that's non truly true.

Fortunately there's a unproblematic rule that you lot sack piece of job to let on the existent website that a link points to. It is

Single-Slash, Double-Dot

To piece of job it, look at where the the link truly goes (by hovering the mouse higher upward it) and:

Find the get-go single frontwards slash
Look at the words between the 2 or iii dots only before the slash
Decide if the link is genuine, based on these words.

The Single-Slash Double-Dot govern explained

In the illustration above, the get-go single frontwards slash is truly half-way through the link:

www.cnn.com.newslist.2013-01.headlines.trouble.com/headline-listing/xx03/index.html

So the website that it is pointing to is truly trouble.com - which powerfulness non concord upward a position that you lot wishing to visit. Compare this with

http://www.bbc.com/future/story/20130129-blue-heart-of-the-planet

where the get-go single-slash is quite nigh the start, only before the actually genuine www.bbc.com.

In summary, the website scream between these 2 or iii dots should tally the ane that is shown inward the email, inwards improver to should concord upward the right ane for the company. For example, ane of these points to the existent TradeMe, inwards improver to ane doesn't:

TradeMe

(Yes they aspect the same: remember you lot need to start yesteryear times hovering your mouse over the links, to let on out where they truly signal to.

Two vs iii dots?

You sometimes convey to banking society cheque back iii dots because closed to countries convey two-level internet addresses. For example, instead of .com you lot testament find

.co.uk - inward the Great Britain (two level, inwards improver to thence you lot need to banking society cheque iii dots)
.com.au inward Commonwealth of Commonwealth of Australia (again,two level, inwards improver to thence you lot need to banking society cheque iii dots)
.ie - inward Ireland, (single-level, inwards improver to thence you lot solely need to banking society cheque 2 dots).

So similar the many cyberspace security issues, at that topographic dot are even so judgements you lot need to make, inwards improver to knowledge you lot need to apply. But still, it's fair to tell that you lot sack ...

Use the single-slash-double-dot govern to motion out where the link inward an e-mail message truly goes to.
[Tweet this quote].

What exercise to if an e-mail or link is suspicious

With old-fashioned spam, the govern was e'er to delete the message, no questions asked.

With suspected phishing emails, it's a lilliputian harder. You need to build a judgement:

What are the chances that this is genuine?/

What are the consequences if it is genuine, but I ignore it?

Is at that topographic dot some other way that I sack banking society cheque out this out, without clicking on the link inward the email? For trial yesteryear times going straight to the banks' website yesteryear times typing inward the address myself - or yesteryear times phoning the mortal to inquire if they truly did e-mail me.

You need to weigh upward these iii factors, inwards improver to based on them create upward one's remove heed whether to investigate further (eg yesteryear times going to the website directly, or emailing the sender for to a greater extent than information, whether to trust the e-mail message, or to only delete it.

TL/DR:

Phishing emails piece of job information virtually you lot to personalize spam.

Apply usual experience inwards improver to intuition to every e-mail that you lot receive. Check that links popular off where they are supposed to - inwards improver to don't click them if they don't.

Use the single-slash-double-dot govern to motion out where the link inward an e-mail message truly goes to. [Tweet this quote]

Displaying e-mail addresses on your blog

Offering an RSS feed

Linking your spider spider web log to your Facebook profile

How to build a "tweet this quote" option.

ADS