ON THE WEB
Reading a link before opening it.
In a simple address such as https://example.com/notes, the first part names the protocol, the middle identifies the host, and the final part identifies a resource on that host.
The host is the part to check carefully. A familiar name elsewhere in a long address does not establish who operates the site. Addresses can also contain encoded characters, redirects, and additional parameters.
HTTPS protects the connection to the named host. It does not establish that every claim on the page is trustworthy. For a sensitive visit, start from a bookmark or a known address and check the destination before entering information.