--- title: "Phishing Link Detection: How To Identify Malicious Links Before They Cause Harm | Phish Protection" description: "Learn how to detect phishing links, spot suspicious URLs, verify website safety, and protect your credentials and devices from malicious attacks." image: "https://phishprotection.com/og/blog/phishing-link-detection-identify-malicious-links-before-they-cause-harm.png" canonical: "https://phishprotection.com/blog/phishing-link-detection-identify-malicious-links-before-they-cause-harm/" --- Quick Answer Phishing link detection helps identify malicious URLs before they steal credentials, spread malware, or cause financial loss. Check the sender, inspect the URL, avoid suspicious links, and verify websites before entering sensitive information. Share [ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fphishprotection.com%2Fblog%2Fphishing-link-detection-identify-malicious-links-before-they-cause-harm%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=Phishing%20Link%20Detection%3A%20How%20To%20Identify%20Malicious%20Links%20Before%20They%20Cause%20Harm&url=https%3A%2F%2Fphishprotection.com%2Fblog%2Fphishing-link-detection-identify-malicious-links-before-they-cause-harm%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fphishprotection.com%2Fblog%2Fphishing-link-detection-identify-malicious-links-before-they-cause-harm%2F "Share on Facebook") [ ](https://reddit.com/submit?url=https%3A%2F%2Fphishprotection.com%2Fblog%2Fphishing-link-detection-identify-malicious-links-before-they-cause-harm%2F&title=Phishing%20Link%20Detection%3A%20How%20To%20Identify%20Malicious%20Links%20Before%20They%20Cause%20Harm "Share on Reddit") [ ](mailto:?subject=Phishing%20Link%20Detection%3A%20How%20To%20Identify%20Malicious%20Links%20Before%20They%20Cause%20Harm&body=Check out this article: https%3A%2F%2Fphishprotection.com%2Fblog%2Fphishing-link-detection-identify-malicious-links-before-they-cause-harm%2F "Share via Email") ![phishing link detection](https://media.mailhop.org/phishprotection/phishing-protection-5325-1786709520092.jpg) Phishing links often appear surprisingly authentic, yet a single click could compromise your personal information, financial details, or credentials. It’s crucial to develop skills for identifying dubious URLs prior to engaging with them to ensure your safety. This guide outlines how to recognize potential threats in links, **safe methods for examining** URLs, as well as tools and strategies to identify phishing risks in real time. ## What Phishing Links Are and Why They’re Dangerous Phishing links are deceptive URLs designed to trick users into visiting fraudulent websites, entering credentials, downloading malware, or approving unauthorized transactions. These [malicious links](https://cybersecuritynews.com/hackers-exploit-xs-grok-ai/) often appear in emails, text messages, collaboration tools, social media posts, QR codes, and even search results. Attackers use phishing scams to imitate trusted brands, financial institutions, cloud platforms, delivery companies, and internal corporate systems. _Effective phishing link detection is critical because modern phishing attempts are increasingly convincing_. A phishing URL may lead to a fake Microsoft Outlook login page, a counterfeit banking portal, or a **cloned SaaS dashboard**. Some phishing scams use a redirected URL to hide the final destination, while others rely on URL shorteners, compromised websites, or newly registered domains that have not yet appeared in a phishing URL database. ![Mastering Phishing Link Detection and Prevention Strategies](https://media.mailhop.org/phishprotection/anti-phishing-service-4896-1786710057352.jpg) Phishing attempts are dangerous because they can lead to account takeover, ransomware deployment, wire fraud, and [identity theft](https://money.usnews.com/personal-finance/identity-theft/identity-theft-fraud-survey). For businesses, malicious links can compromise web and email domains, expose customer data, and damage trust. For individuals, the consequences may include stolen passwords, financial loss, and long-term identity theft prevention challenges. ### Why attackers rely on suspicious URLs Attackers prefer suspicious URLs because they are easy to distribute and difficult for users to evaluate quickly. A message may look legitimate at first glance, especially when it uses brand impersonation, a convincing logo, or urgent language. Some fraudulent websites also use HTTPS and a valid SSL certificate, which can mislead users into **thinking the page is safe**. While an HTTPS site protects data in transit, it does not prove the website is legitimate. This is why phishing link detection must go beyond checking for SSL or HTTPS. A strong phishing scanner evaluates domain reputation, redirects, page content, hosting behavior, suspicious patterns, and threat intelligence signals. A real-time URL scanner can also identify new threats, including [zero-day phishing](https://phishprotection.com/blog/how-ai-detects-zero-day-phishing-before-security-patches-released/) campaigns that traditional blocklists may not yet recognize. ## Common Signs of a Malicious Link **Recognizing malicious links begins** with understanding the warning signs. Although not every suspicious URL is harmful, repeated indicators should trigger caution and further inspection with a phishing link checker or link safety checker. ### Misspelled domains and typosquatting Typosquatting attacks use domains that look nearly identical to trusted brands. For example, attackers may replace letters, add hyphens, use lookalike characters, or register deceptive TLD variations. _These typosquat variants are commonly used in phishing scams because users often scan links and miss small differences_. Organizations use domain monitoring, typosquat monitoring, and [brand protection](https://ennoventure.com/resources/articles/brand-protection-guide-2026-protect-your-brand) platforms such as Bolster or bolster.ai to identify lookalike domains before they are weaponized. Fortune 500 companies often **rely on continuous monitoring**, threat analysis, and take-down services to reduce exposure. Bolster’s take down services, for example, help organizations respond to fraudulent websites involved in brand impersonation and phishing attempts. ![Typosquatting Comparison](https://media.mailhop.org/phishprotection/protection-from-phishing-4896-1786709756679.jpg) #### Red flags in the domain name Watch for: - Extra words added to a brand name, such as login-secure-brand.com - Misspellings, character substitutions, or unusual TLDs - Domains that imitate web and email domains used by legitimate companies - Newly created domains with no reputation history - Links where the displayed anchor text does not match the actual destination A phishing link checker can help **identify these suspicious patterns** and provide link scan results before you interact with the page. ### Urgency, threats, and unexpected requests Many phishing attempts rely on emotional pressure. Messages may claim that your account will be closed, a payment failed, a package is delayed, or your password must be reset immediately. These tactics are common in [phishing scams](https://fox59.com/news/the-most-impersonated-brand-names-in-phishing-scams/) because urgency reduces careful decision-making. If a message asks you to verify credentials, download an attachment, approve a transaction, or bypass normal security processes, treat the link as suspicious. Before clicking, scan suspicious URLs with a phishing scanner, scam website checker, or real-time URL scanner. ## Safe Ways to Inspect Links Before Clicking Safe inspection is a core part of **phishing link detection**. The goal is to determine whether a link is trustworthy without opening yourself to risk. ### Hover, preview, and expand carefully On desktop, hover over a link to preview the destination. On mobile, press and hold carefully to reveal the URL without opening it. Look for mismatched domains, URL shorteners, encoded characters, and strange paths. If the link is shortened, use a reputable link tester tool or phishing link checker to inspect it safely. ![Phishing Delivery Channels](https://media.mailhop.org/phishprotection/email-phishing-protection-7965-1786709811226.jpg) Do not manually visit suspicious URLs in your browser. Instead, use site URL scanning, live URL scanning, or a **real-time URL scanner** that performs URL extraction and inspection in a controlled environment. _Tools that provide sandbox analysis can open the destination in isolation and analyze page behavior without exposing your device_. #### Check the destination, not just the display text A message may show “View Invoice” or “Microsoft Outlook Security Notice,” but the actual link may lead to a fraudulent website. Always inspect the destination domain. Also check whether the site forces unexpected redirects, since a redirected URL can conceal malicious infrastructure. A good phishing detection tool should **report the final destination**, link status, redirect chain, hosting details, [SSL certificate](https://www.fortinet.com/resources/cyberglossary/ssl-certificate) information, and any malicious site warning associated with the page. ### Verify through official channels If a link claims to come from a bank, employer, delivery provider, or software vendor, do not use the link in the message. Open a new browser tab and navigate to the official website directly. For workplace messages, confirm through secure communications such as an internal ticketing system or verified contact. Organizations should strengthen email security with SPF, DKIM, and DMARC. Running an SPF check, DKIM check, and DMARC check helps verify whether messages are authorized to use a domain. While these controls do not **eliminate every phishing risk**, they improve email link protection and reduce spoofing across web and email domains. ## Tools and Technologies for Phishing Link Detection Modern phishing link detection combines reputation data, AI-powered detection, sandbox analysis, [browser security](https://www.channelinsider.com/security/cybersecurity-ma-ai-agents-browser-security/), and email security controls. Because phishing attempts evolve rapidly, security teams need more than static blocklists. ![Phishing Detection Technology](https://media.mailhop.org/phishprotection/anti-phishing-software-7965-1786709903495.jpg) ### Phishing link checkers and scanners A phishing link checker helps users and analysts scan suspicious URLs before clicking. Popular tools include CheckPhish, EasyDMARC, SafeToOpen, and Bolster. These platforms analyze suspicious URLs using threat intelligence, URL reputation, domain age, redirects, page content, and known indicators from a **phishing URL database**. Examples include: - **CheckPhish**: Offers a Phishing Link Checker Tool, CheckPhish Community insights, and the CheckPhish API for automated workflows. - **EasyDMARC**: Provides the EasyDMARC Phishing Link Scanner and EasyDMARC scam link checker, along with email authentication tools for SPF, DKIM, and DMARC. - **SafeToOpen**: Offers the SafeToOpen Scanner, SafeToOpen browser extension, SafeToOpen email tool, and SafeToOpen sandbox for safer link inspection. - **Bolster**: Supports brand protection, domain monitoring, [phishing protection](https://phishprotection.com/), and take-down services for organizations targeted by phishing scams. A phishing scanner can **detect malicious websites** by reviewing the URL, page content, hosting infrastructure, and visual similarity to known brands. _A real-time URL scanner is especially useful for identifying suspicious URLs that are newly created, unrated links, or part of zero-day phishing campaigns_. #### What good link scan results should include Useful link scan results should show: - Whether the URL is clean, suspicious, or malicious - The final redirected URL and link status - Domain registration and TLD information - SSL and HTTPS details, including SSL certificate validity - Page screenshots or sandbox analysis findings - [Threat intelligence](https://www.ibm.com/think/topics/threat-intelligence) matches and suspicious patterns - Whether the domain appears in a phishing URL database - Immediate alerts when **malicious links are confirmed** A reliable phishing link checker should also support continuous monitoring, especially for enterprises that face ongoing brand impersonation and typosquatting attacks. ![Real-Time AI URL Scanning Process](https://media.mailhop.org/phishprotection/spear-phishing-protection-2234-1786710250303.jpg) ### Real-time URL scanning and AI-powered detection A real-time URL scanner evaluates links at the moment of access, rather than relying only on old reputation data. This matters because attackers often **create fraudulent websites** for short-lived campaigns. By the time a static blacklist catches up, users may already have clicked. AI-powered detection uses a machine-learning algorithm to identify visual clones, suspicious login forms, abnormal redirects, and page behavior associated with phishing attempts. Combined with threat analysis, live URL scanning, and sandbox analysis, these systems can detect malicious websites even when they are hosted on compromised infrastructure or previously clean domains. **Real-time protection** is also important for email link protection. Some email security tools rewrite or inspect links when users click them, while browser security tools can block malicious links before pages load. In enterprise environments, integrations with Microsoft Outlook and [secure email gateways](https://www.cloudflare.com/learning/email-security/secure-email-gateway-seg/) help scan suspicious URLs embedded in messages and attachments. ## What to Do If You Click a Suspicious Link Clicking a suspicious link does not always mean your account is compromised, but you should act quickly. The response depends on whether you only opened the page, entered credentials, downloaded a file, or approved a request. ### Immediate steps after clicking If you clicked one of these malicious links, disconnect from the site immediately. Do not enter any information. If you **submitted a password**, change it from a trusted device and enable multifactor authentication. If you downloaded a file, do not open it; run [endpoint protection](https://www.checkpoint.com/cyber-hub/threat-prevention/what-is-endpoint-security/) and notify your security team. _For workplace incidents, report the message to IT or security operations_. Provide the full email, headers if available, and the suspicious URL. Security teams can use a phishing scanner, phishing link checker, or real-time URL scanner to analyze the page and determine whether other users received the same phishing attempts. ![Post-Click Response Checklist](https://media.mailhop.org/phishprotection/anti-phishing-solutions-3356-1786709942401.jpg) #### If credentials were entered If you entered credentials on a phishing URL: - Change the affected password immediately. - Revoke active sessions and tokens if available. - Enable or reset [multifactor authentication](https://www.onelogin.com/learn/what-is-mfa). - Review account **activity for suspicious logins**. - Notify your organization, bank, or service provider. - Monitor for identity theft prevention indicators such as unauthorized account changes. Security teams should also search email logs for related phishing scams, block the domain, check MX Servers where relevant, and use threat intelligence to identify connected infrastructure. ### Strengthen protection after the incident After an incident, improve phishing protection with layered controls. Use [email security](https://phishprotection.com/practices-for-email-security-learning-implementing-protecting/) tools, browser security tools, and email link protection to block future malicious links. Deploy a phishing detection tool that can scan suspicious URLs in real time and **generate immediate alerts** when users encounter dangerous pages. _Organizations should also invest in domain monitoring, typosquat monitoring, DMARC enforcement, employee training, and brand protection_. Continuous monitoring helps identify fraudulent websites early, while take-down services reduce the lifespan of active phishing scams. For individuals, use a trusted phishing link checker before opening suspicious URLs, keep browsers updated, and treat **unexpected messages with caution**. For businesses, combine a phishing scanner, real-time URL scanner, SPF, DKIM, DMARC, sandbox analysis, and threat intelligence to reduce exposure across email, web, and collaboration channels. ![Brad Slavin](https://media.mailhop.org/phishprotection/images/authors/brad-slavin.jpg) [ Brad Slavin ](/authors/brad-slavin/) General Manager Founder and General Manager of DuoCircle. Product strategy and commercial lead across DuoCircle's 2,000+ customer base. [LinkedIn Profile →](https://www.linkedin.com/in/bradslavin) ## Protect your inbox from phishing attacks Real-time email security with 60-day free trial. No credit card required. [Start Free Trial](https://portal.duocircle.com/cart.php?a=add&pid=101&brand=phishprotection) [View Pricing](/pricing/) Share this article [ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fphishprotection.com%2Fblog%2Fphishing-link-detection-identify-malicious-links-before-they-cause-harm%2F) [ ](https://twitter.com/intent/tweet?text=Phishing%20Link%20Detection%3A%20How%20To%20Identify%20Malicious%20Links%20Before%20They%20Cause%20Harm&url=https%3A%2F%2Fphishprotection.com%2Fblog%2Fphishing-link-detection-identify-malicious-links-before-they-cause-harm%2F) [ ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fphishprotection.com%2Fblog%2Fphishing-link-detection-identify-malicious-links-before-they-cause-harm%2F) Copy Related Articles - [ ![Phish Protection blog post image](https://media.mailhop.org/phishprotection/images/2022/09/phishing-attack-prevention-7779.jpg) 0ktapus, Okta Breach Helps Attackers Launch Sophisticated Supply Chain Attacks Foundational ](/blog/0ktapus-okta-breach-helps-attackers-launch-sophisticated-supply-chain-attacks/) - [ ![Phish Protection blog post image](https://media.mailhop.org/phishprotection/images/2026/02/phishing-definition-7533.jpg) 12 Real-World Spear Phishing Examples And The Red Flags You Missed Foundational ](/blog/12-real-world-spear-phishing-examples-and-the-red-flags-you-missed/) - [ ![Phish Protection blog post image](https://media.mailhop.org/phishprotection/images/2019/08/anti-phishing-software-6479.jpg) 13 Spear Phishing Attacks Examples To Justify Investment For Phishing Prevention Solutions In Your Organization Foundational ](/blog/13-spear-phishing-attacks-examples-to-justify-investment-for-phishing-prevention-solutions-in-your-organization/) - [ ![Phish Protection blog post image](https://media.mailhop.org/phishprotection/images/2025/05/cyber-security.jpg) All 14 centers of Kettering Health were affected by a massive ransomware attack, Major outage in the Ohio medical center Foundational ](/blog/14-centers-of-kettering-health-were-affected-by-massive-ransomware-attack-in-ohio-medical-center/) ## Related Articles [ Foundational 5m 0ktapus, Okta Breach Helps Attackers Launch Sophisticated Supply Chain Attacks Sep 5, 2022 ](/blog/0ktapus-okta-breach-helps-attackers-launch-sophisticated-supply-chain-attacks/)[ Foundational 14m 12 Real-World Spear Phishing Examples And The Red Flags You Missed Feb 4, 2026 ](/blog/12-real-world-spear-phishing-examples-and-the-red-flags-you-missed/)[ Foundational 4m 13 Spear Phishing Attacks Examples To Justify Investment For Phishing Prevention Solutions In Your Organization Aug 1, 2019 ](/blog/13-spear-phishing-attacks-examples-to-justify-investment-for-phishing-prevention-solutions-in-your-organization/)[ Foundational 4m All 14 centers of Kettering Health were affected by a massive ransomware attack, Major outage in the Ohio medical center May 23, 2025 ](/blog/14-centers-of-kettering-health-were-affected-by-massive-ransomware-attack-in-ohio-medical-center/) ```json {"@context":"https://schema.org","@type":"Organization","name":"Phish Protection","url":"https://phishprotection.com","logo":{"@type":"ImageObject","url":"https://phishprotection.com/images/phishprotection-logo.png"},"description":"Advanced phishing protection and email security for businesses. Real-time threat defense, time-of-click protection, and seamless Office 365 integration.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://github.com/duocircle"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://phishprotection.com/contact/"},"knowsAbout":["Phishing Protection","Email Security","Anti-Phishing","Business Email Compromise","Ransomware Protection","Time of Click Protection","Office 365 Email Security","Advanced Threat Defense"]} ``` ```json {"@context":"https://schema.org","@type":"WebSite","name":"Phish Protection","url":"https://phishprotection.com","description":"Advanced phishing protection and email security for businesses. Real-time threat defense, time-of-click protection, and seamless Office 365 integration.","publisher":{"@type":"Organization","name":"Phish Protection","url":"https://phishprotection.com","logo":{"@type":"ImageObject","url":"https://phishprotection.com/images/phishprotection-logo.png"},"description":"Advanced phishing protection and email security for businesses. Real-time threat defense, time-of-click protection, and seamless Office 365 integration.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}}} ``` ```json {"@context":"https://schema.org","@type":"BlogPosting","headline":"Phishing Link Detection: How To Identify Malicious Links Before They Cause Harm","description":"Learn how to detect phishing links, spot suspicious URLs, verify website safety, and protect your credentials and devices from malicious attacks.","url":"https://phishprotection.com/blog/phishing-link-detection-identify-malicious-links-before-they-cause-harm/","datePublished":"2026-08-14T00:00:00.000Z","dateModified":"2026-08-14T00:00:00.000Z","dateCreated":"2026-08-14T00:00:00.000Z","author":{"@type":"Person","@id":"https://phishprotection.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://phishprotection.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin is the founder and General Manager of DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. He founded DuoCircle in 2014 and has led the company's growth to 2,000+ customers across its email security product family. Brad's focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/phishprotection/images/authors/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"Phish Protection","url":"https://phishprotection.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"Phish Protection","url":"https://phishprotection.com","logo":{"@type":"ImageObject","url":"https://phishprotection.com/images/phishprotection-logo.png"},"description":"Advanced phishing protection and email security for businesses. Real-time threat defense, time-of-click protection, and seamless Office 365 integration.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://github.com/duocircle"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://phishprotection.com/contact/"},"knowsAbout":["Phishing Protection","Email Security","Anti-Phishing","Business Email Compromise","Ransomware Protection","Time of Click Protection","Office 365 Email Security","Advanced Threat Defense"]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://phishprotection.com/blog/phishing-link-detection-identify-malicious-links-before-they-cause-harm/"},"articleSection":"foundational","keywords":"","image":{"@type":"ImageObject","url":"https://media.mailhop.org/phishprotection/phishing-protection-5325-1786709520092.jpg","caption":"phishing link detection"},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}} ``` ```json {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://phishprotection.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://phishprotection.com/blog/"},{"@type":"ListItem","position":3,"name":"Foundational","item":"https://phishprotection.com/foundational/"},{"@type":"ListItem","position":4,"name":"Phishing Link Detection: How To Identify Malicious Links Before They Cause Harm","item":"https://phishprotection.com/blog/phishing-link-detection-identify-malicious-links-before-they-cause-harm/"}]} ```