URL and Hyperlink!

[nakamura12]

This thread is about URL and Hyperlink as you can read it in the thread title!

Now, Hyperlink and URL is kind of the same if you ask me because both are used to access a site but they are also different in some ways. I hope this will help why we should be careful with links or hyperlinks.

What is URL?
A Uniform Resource Locator (URL), colloquially termed a web address, is a reference to a web resource that specifies its location on a computer network and a mechanism for retrieving it. A URL is a specific type of Uniform Resource Identifier (URI), although many people use the two terms interchangeably. URLs occur most commonly to reference web pages (http), but are also used for file transfer (ftp), email (mailto), database access (JDBC), and many other applications.

Example:

Code:

http://www.example.com/index.html
http://example.com/men/t-shirt

URL are consist of several important pieces of information. Here is an image that shows you about URL

What is a Hyperlink?

In computing, a hyperlink, or simply a link, is a reference to data that the reader can follow by clicking or tapping. A hyperlink points to a whole document or to a specific element within a document. Hypertext is text with hyperlinks. The text that is linked from is called anchor text. A software system that is used for viewing and creating hypertext is a hypertext system, and to create a hyperlink is to hyperlink (or simply to link). A user following hyperlinks is said to navigate or browse the hypertext.



Be careful with hyperlinks as it can fool you if you didn't check carefully. Hyperlinks for varies to the person. A person can choose to make it as CLICKABLE TEXT, IMAGE or PIC, ICON or LOGO like facebook or a LINK.

Example:
https://www.google.com/#spf=1581369720691
DON'T BE FOOLED ABOUT THE HYPERLINK ABOVE! IT'S NOT REALLY GOOGLE AS WE CAN SEE. IT WILL REDIRECT TO WIKIPEDIA!

Code:

[url=https://en.m.wikipedia.org/wiki/Hyperlink]https://www.google.com/#spf=1581369720691[/url]

ALSO, be careful with hyperlinks because some are link to a file that will automatic download after you have clicked the hyperlink.

Here's  a guide on how to bypass it by TryNinja

Please, don't count on this. This is a bad behavior to think the URL is legit because the statusbar shows it so (and thus, a terrible suggestion).

Here is a simple workaround to bypass this "security" measure:

Code:

[code]Refer to the original post below as it can't be quoted and it will blocked me to edit the thread. 

[/code]

Result: you hover the link and it shows realwebsite.com in the statusbar. Click it and you will end up on phishingwebsite.com

Always to triple check whether it is safe or not and avoid clicking phishing link. You thought that it's the correct website but it's just a phishing site and a clone to the legit site. More information can be found on those links below.

Hovering to a hyperlink located below:

As away of checking i also usually like Hovering the pointer above the hyperlink before clicking on it. The real link gets displayed in the bottom left corner of your browser. This can help avoid visiting malicious or phishing websites or automatically downloading malware.

Source:
https://en.m.wikipedia.org/wiki/Hyperlink
https://www.techwalla.com/articles/difference-between-links-urls
https://en.m.wikipedia.org/wiki/URL
https://marketplace.webkul.com/create-seo-friendly-urls/
https://accessibility.umn.edu/core-skills/hyperlinks

[bitmover]

Example:
https://www.google.com/#spf=1581369720691
DON'T BE FOOLED ABOUT THE HYPERLINK ABOVE! IT'S NOT REALLY GOOGLE AS WE CAN SEE. IT WILL REDIRECT TO WIKIPEDIA!

Code:

[url=https://en.m.wikipedia.org/wiki/Hyperlink]https://www.google.com/#spf=1581369720691[/url]

This is important to prevent phishing, as many phishing attempts do that, especially via email.

Always double check destination URLs,  and use virus total in unknown websites.

[JeromeTash]

ALSO, be careful with hyperlinks because some are link to a file that will automatic download after you have clicked the hyperlink.

Always to triple check whether it is safe or not and avoid clicking phishing link. You thought that it's the correct website but it's just a phishing site and a clone to the legit site. More information can be found on those links below.

As away of checking i also usually like Hovering the pointer above the hyperlink before clicking on it. The real link gets displayed in the bottom left corner of your browser. This can help avoid visiting malicious or phishing websites or automatically downloading malware.

[nakamura12]

ALSO, be careful with hyperlinks because some are link to a file that will automatic download after you have clicked the hyperlink.

Always to triple check whether it is safe or not and avoid clicking phishing link. You thought that it's the correct website but it's just a phishing site and a clone to the legit site. More information can be found on those links below.

As away of checking i also usually like Hovering the pointer above the hyperlink before clicking on it. The real link gets displayed in the bottom left corner of your browser. This can help avoid visiting malicious or phishing websites or automatically downloading malware.

It seems I forgot to add the hovering to a hyperlink that will show the destination of a hovered clickable text. I'll edit the op and I'll just quote your post and add it on to the thread if you're okay with it. In my opinion, It's the same if I have to search for it and added it here so I'll just quote it and only less time used.

[TryNinja]

It seems I forgot to add the hovering to a hyperlink that will show the destination of a hovered clickable text. I'll edit the op and I'll just quote your post and add it on to the thread if you're okay with it. In my opinion, It's the same if I have to search for it and added it here so I'll just quote it and only less time used.

Dude, did you forget what I told you the last time you suggested someone to check the hover link of a URL to see if it is legit?

Please, don't count on this. This is a bad behavior to think the URL is legit because the statusbar shows it so (and thus, a terrible suggestion).

Here is a simple workaround to bypass this "security" measure:

Code:

<a href="realwebsite.com" onclick="location.href='phishingwebsite.com';return false">Click here!</a>

Result: you hover the link and it shows realwebsite.com in the statusbar. Click it and you will end up on phishingwebsite.com

This isn't possible on BTT since it uses simply BBCode hyperlink tags, but it is in every other website.

[UserU]

Please, don't count on this. This is a bad behavior to think the URL is legit because the statusbar shows it so (and thus, a terrible suggestion).

Here is a simple workaround to bypass this "security" measure:

Code:

<a href="realwebsite.com" onclick="location.href='phishingwebsite.com';return false">Click here!</a>

Result: you hover the link and it shows realwebsite.com in the statusbar. Click it and you will end up on phishingwebsite.com

This isn't possible on BTT since it uses simply BBCode hyperlink tags, but it is in every other website.
[/quote]

That's some scary shit. Looks like the good ol' right-click, copy, paste would do the trick.

[Saint-loup]

There are some protections on bitcointalk against that :

• If a link points outside the forum it will be dispayed in blue when you hover over it while it will be displayed in green otherwise

When you hover over with mouse over link that is outside this forum, color will be blue




When you hover over link and you see green color, that is link inide Bitcointalk forum.

• When you try to impersonate a bitcointalk url, the real one is displayed instead :

[url=https://en.m.wikipedia.org/wiki/Hyperlink]https://bitcointalk.org[/url]
will give
https://en.m.wikipedia.org/wiki/Hyperlink
and not
https://bitcointalk.org

[Jawhead999]

What is said by @TryNinja is true
This trick can be only found in other website who use Javascript

The actual link target can be "spoofed" using Javascript: It is quite common for websites to exchange the href value with another link as soon as the user clicks on it. For example, you can observe this when visiting Google search results. When you mouseover one of the links, it will be displayed as https://security.stackexchange.com/... but as soon as you click it, that event is captured and you visit an intermediate site first (https://www.google.com/url?...) which redirects you to the actual target.

Sorry I only found the example case using my local language
This is the website : http://kerax-telor.blogspot.com/2015/11/cara-membuat-link-palsu-ketika-di-klik.html
Scroll down, and if you are hovering your pointer to DOWNLOAD it's will show Facebook.com in the bottom left display. But, when you click it,it's not going to Facebook.com... but go to Kabeka.net



The best way to prevent this is right click on the link and click Inspect. So you will see the fake link and real link.
Or using copy-paste

[Saint-loup]

That's some scary shit. Looks like the good ol' right-click, copy, paste would do the trick.

No, you can't do that to solved it. The fact if you're do copy and paste or right-click on that link, it's wouldn't show the real link.
The best way to prevent this is right click on the link and click Inspect. So you will see the fake link and real link

I don't understand what you mean. If you copy and paste the text of the link how you could be tricked?
You're wrong IMO, doing a basic copy and paste of the text is safe.
If you get a pasted text different from the one copied, it just means you have a clipboard hijacker malware on your computer...

[Jawhead999]

That's some scary shit. Looks like the good ol' right-click, copy, paste would do the trick.

No, you can't do that to solved it. The fact if you're do copy and paste or right-click on that link, it's wouldn't show the real link.
The best way to prevent this is right click on the link and click Inspect. So you will see the fake link and real link

I don't understand what you mean. If you copy and paste the text of the link how you could be tricked?
You're wrong IMO, doing a basic copy and paste of the text is safe.
If you get a pasted text different from the one copied, it means you have a clipboard hijacker virus on your computer...

Sorry, my bad Forgive me
I'am so tired and misunderstanding, I will edit my post.
Thank you very much for correcting my post sir

If you get a pasted text different from the one copied, it means you have a clipboard hijacker virus on your computer...

Yeah, but better to showing the script to know the real link directed. Because when we do copy and paste the link, we only see the fake link... not the real malware link.

[LbtalkL]

Good info everyone should be careful in clicking links even here in Bitcointalk, In the previous year, I guess someone posted a phishing link here using these Hyperlinks. Sometimes when you are tired you don't have time to hover your mouse to check the link, I install phishing protection like cryptonite extension and ublock origin - ad blocker to prevent these phishing attempts.

[UserU]

  I don't understand what you mean. If you copy and paste the text of the link how you could be tricked?
You're wrong IMO, doing a basic copy and paste of the text is safe.
If you get a pasted text different from the one copied, it just means you have a clipboard hijacker malware on your computer...

True, one can't edit the link that has been copied. I was left confused for a moment by his earlier post, haha.

[nakamura12]

Good info everyone should be careful in clicking links even here in Bitcointalk, In the previous year, I guess someone posted a phishing link here using these Hyperlinks. Sometimes when you are tired you don't have time to hover your mouse to check the link, I install phishing protection like cryptonite extension and ublock origin - ad blocker to prevent these phishing attempts.

The code use to bypass such fake sites is good for desktop while in mobile it is not that easy. We all know that using mobile won't let you hover and those who mostly use mobile phones should be very careful. Much choice to do is open the settings of your browser and try to check about the hyperlink display then find page to search for the hyperlink and see if it is phished site.

[nakamura12]

Bump!

As I read in some thread I found a thread explaining about a hidden url or a hyperlink so what comes to my mind is this thread. Read some of the replies have a good point which I forgot to add to this thread. Hope many newbies who haven't know this should read for further learning.

[hd49728]

URL and hyperlink contain risks of phishing attacks so I agree with OP that everyone should be aware of such risks before make a click on URL or hyperlink.

What to do to avoid phishing sites
Host-file to deal with phishing sites. It is for known, detected phishing sites and can not prevent you from new phishing sites which have not been reported and detected.
Use this for identifying Scam/Phishing/ websites & exchanges in crypto
Punycode and how to protect yourself from Homograph Phishing attacks?
Can also do phising quizzes in [LEARN] Phishing Quizzes - Beginners & Experts to test your level of understandings on phishing attacks.

My composed my topic when I saw yours, A Reminder To Newbies!. One year and you made another one, more details, more informative. Congratulations!

[jademaxsuy]

In order to avoid getting Phished out by a wrong site making a user to disclose important details especially online wallet, then one must know about this so as to get into the wrong site which usually hackers do. There are may attempts of this kind here and sad to say that there are really few who falls for it. Being careless is not a  fault but it could be preventive to get into trouble by being careful. I must admit I was also being scam but not here. It just a  RPG game where i disclose info even the password to think that the site is legit for giveaways. I was wrong when I was not able to log in into my account because the password was change already. However, it was a lesson learn and one may have hard time for me to fall this kind of trap.

[tranthidung]

That thread of yours is good and you can add it in OP. SSL vs. TLS!. Some images are broken in this thread and that thread, you should check and fix it when you have time.

[friends1980]

Also, try to type the URL manually every time you need to access a website containing sensitive information.

I seem to remember a scam from a few years ago and I think it concerned myetherwallet.com, where the small "L" was replaced by a capital "i" - not 100% sure about the domain, but the example is the same anyway:

MyEtherWallet
and
MyEtherWaIIet are NOT the same.

In certain font styles, l and I look exactly the same, just like 0 and O etc.

[CryptocurencyKing]

From what I gather in your article, the key word is centered on referencing on a page. That's it.
There is barely any difference about that as to function, the URL and hyperlink virtually does the same thing.
They making referencing a page to another individual more easier, safe stress, data and time or randomly looking for information.
Also, scammers has exploited this as, you never know what lies behind a URL or hyperlink until you click it and some of these could be coded to give a go or an entry to whom ever might have sent it hence, it's advised to be minding of the URL and hyperlinks you click as they making phishing very possible.

[UserU]

Also, try to type the URL manually every time you need to access a website containing sensitive information.

I seem to remember a scam from a few years ago and I think it concerned myetherwallet.com, where the small "L" was replaced by a capital "i" - not 100% sure about the domain, but the example is the same anyway:

MyEtherWallet
and
MyEtherWaIIet are NOT the same.

In certain font styles, l and I look exactly the same, just like 0 and O etc.

Usually if you visit the sites often, their URL should auto-complete.

Or better, just bookmark.