How Do You Tell If A Download Or URL Is Safe?

[FreddyFreeloader]

I have a friend (make that a former friend, now) that is Vice President of IT for a smallish company. She has a degree in computer science and has been in the field for about 20 years.
We had dinner last night and she talked about how her grandkids liked the Star Wars movies. I suggested she get the Clone Wars and show it to them. So, when I got home, I emailed her a link from Cartoon Network about it. She wouldn't even open that link because she was afraid there might be malware in it. She was using an Android phone.
Question - how do you determine if a link or download is safe?
Bty - I think Cartoon Network website is pretty safe, and was wondering - if she is such an expert, why does she think it isn't?
Thanks.

 

[Cowpipe]

Copy and paste the below URL into your browser and then check what the security certificate says:



What does it say?

 

[FreddyFreeloader]

Copy and paste the below URL into your browser and then check what the security certificate says:



What does it say?

Identity not verified is what Chrome says. VirusTotal says clean site. Can that be checked by an Android phone that way?

 

[Cowpipe]

Identity not verified is what Chrome says. VirusTotal says clean site. Can that be checked by an Android phone that way?

What site did you check? www.cartoonnetwork.com ?

 

[FreddyFreeloader]

What site did you check? www.cartoonnetwork.com ?

Cartoonnetwork.com/clonewars
SmartScreen says clean, too. Everything I've checked it with says clean, as well.

 

[Deleted member 178]

install webutation in your browser and use norton DNS; those two are a first filtering step.

 

[FreddyFreeloader]

BTY - here's her company website - big whoop.

http://esite.cd-hartnett.com/public/home/welcome.jsp

 

[Cowpipe]

Cartoonnetwork.com/clonewars

Lol you're missing the point

Check the code tag I posted The point being that it is easy to disguise a URL as legitimate. As Umbra said, a good reputation software or 'traffic light links' can help reduce the chance of clicking on a rogue link. But common sense too.

Which of these sites seems more credible to you?

a1082.systemcleaner.com/adf.php?r=208490710974097104703740926804&c=1

or

a1082.systemcleaner.com/2082097/2017390/179039/1

Can't tell? How about some context:

Hello FreddyFreeLoader! Please find your systemcleaner download below, thank you!

a1082.systemcleaner.com/adf.php?r=208490710974097104703740926804&c=1

Peter Smith
Customer Support Agent
SystemCleaner Ltd.

What does not make the sun so beautiful can only make you stronger. A computer is a device for love to surf the internet, if you care for it you will last it forever. The internet is an everlasting discovery, enrich your life with it's sensibility, discover the wonders of the world.

Hello Freddy Kennedy,

Please find your systemcleaner download below, thank you!

a1082.systemcleaner.com/2082097/2017390/179039/1

Regards,

Peter Smith
Customer Support Agent
SystemCleaner Ltd.

I usually look for all kinds of signs, for example, does the structure of the URL fit in with it's context (for example, is it an affiliate link? is it passing strange parameters? Yes? I won't click it then). I get to know domains both trusted and untrusted in my head, and of course if I recognise a domain I can make a more informed choice. If I don't recognise it, I can google it to see what other URLs are on the domain (anything suspicious? any keyword stuffing? any bad reviews or virus reports? etc)

 

[FreddyFreeloader]

Lol you're missing the point

Check the code tag I posted The point being that it is easy to disguise a URL as legitimate. As Umbra said, a good reputation software or 'traffic light links' can help reduce the chance of clicking on a rogue link. But common sense too.

Which of these sites seems more credible to you?

a1082.systemcleaner.com/adf.php?r=208490710974097104703740926804&c=1

or

a1082.systemcleaner.com/2082097/2017390/179039/1

Can't tell? How about some context:





I usually look for all kinds of signs, for example, does the structure of the URL fit in with it's context (for example, is it an affiliate link? is it passing strange parameters? Yes? I won't click it then). I get to know domains both trusted and untrusted in my head, and of course if I recognise a domain I can make a more informed choice. If I don't recognise it, I can google it to see what other URLs are on the domain (anything suspicious? any keyword stuffing? any bad reviews or virus reports? etc)

I saw the spam.com.
I wouldn't open any of your links co's theys iz wierd lookings.
My question is why did she think the Cartoon Network had some malware???

 

[Cowpipe]

I saw the spam.com.
I wouldn't open any of your links co's theys iz wierd lookings.
My question is why did she think the Cartoon Network had some malware???

Haha

It's actually just exploiting a convenience feature of Chrome which means you can put as many dots (%2E in hex) before the domain as you like and because the 'subdomain' is blank, Chrome will resolve the parent domain. Put enough of them and you hide the link Wouldn't post anything malicious here but it's a fun way of making a point. Of course Javascript is the way to go now but thankfully we don't allow that in posts here

I can only assume either she has a policy of not clicking links in emails, "just in case", or she might not know what Cartoon Network is or at least what their proper website is. Remember when you're tired... www.cartoonetwork.com and www.cartoonnetwork.com can look remarkably similar

And don't forget the possibility that cartoon network may have been hacked. If she's reading the email on a sensitive computer, the safest thing she can do is not click any links or visit any sites which might have been compromised

If she's worried though, I would advise that she receives her emails in plain text format and gets a link reputation checker like Umbra suggested

Click This Link If You Dare.....

 

[Cats-4_Owners-2]

I have a friend (make that a former friend, now)...
She wouldn't even open that link because she was afraid there might be malware in it...using an Android phone.
Question - if she is such an expert, why does she think it isn't (safe)?

There is a fiber here which indicates an impasse in your shared friendship, and her stubborness (a prominant streak of paranoia, many here know well) also seemed to have blinded her in her ability to remember to be grateful for your thoughtfulness to her grandchildren.

Cartoonnetwork.com/clonewars
SmartScreen says clean, too. Everything I've checked it with says clean, as well.

Apart from being correct which is what I think more accurately describes you, Freddy, real friendships can hopefully continue upon their paths even after being rudely (& unfairly) redirected whilst attempting to spread goodwill!

 

[Deleted member 178]

normally she should know all the basic security steps, since she is graduated and has 20 years of exp ; unlike me (self-made IT sec )

 

[FreddyFreeloader]

There is a fiber here which indicates an impasse in your shared friendship, and her stubborness (a prominant streak of paranoia, many here know well) also seemed to have blinded her in her ability to remember to be grateful for your thoughtfulness to her grandchildren.

Apart from being correct which is what I think more accurately describes you, Freddy, real friendships can hopefully continue upon their paths even after being rudely (& unfairly) redirected whilst attempting to spread goodwill!

Thanks! I've had my fill of this woman. After watching her try without success to plug an HDMI cable into her TV, I offered to help but was met with a, "I know what I'm doing and I don't need any help. I told you I was very independent!!!" After she gave up, I looked and saw she had been trying to stick the HDMI cable into a USB port.

 

[Cowpipe]

Thanks! I've had my fill of this woman. After watching her try without success to plug an HDMI cable into her TV, I offered to help but was met with a, "I know what I'm doing and I don't need any help. I told you I was very independent!!!" After she gave up, I looked and saw she had been trying to stick the HDMI cable into a USB port.

Hahaha, we've all done it, goodness knows I have far too many times!

 

[Deleted member 178]

the worst i had was:

highly distress phone call from a known client: "Umbra, my computer is out, and i have a presentation in 15mn ! come here and fix it asap please"
me ( on site , and after a one minute inspection): "you should plug in your computer....before starting it"
the desperate client: "how much will be the bill?"
me: "you are free tonight?"
her: "sure , what time?"



i love my job

 

[Cats-4_Owners-2]

Oh!!! I love your job too, lol!!!

 

[Anupam]

the worst i had was:

highly distress phone call from a known client: "Umbra, my computer is out, and i have a presentation in 15mn ! come here and fix it asap please"
me ( on site , and after a one minute inspection): "you should plug in your computer....before starting it"
the desperate client: "how much will be the bill?"
me: "you are free tonight?"
her: "sure , what time?"



i love my job

Damn. Can i Join?

I have a friend (make that a former friend, now) that is Vice President of IT for a smallish company. She has a degree in computer science and has been in the field for about 20 years.
We had dinner last night and she talked about how her grandkids liked the Star Wars movies. I suggested she get the Clone Wars and show it to them. So, when I got home, I emailed her a link from Cartoon Network about it. She wouldn't even open that link because she was afraid there might be malware in it. She was using an Android phone.
Question - how do you determine if a link or download is safe?
Bty - I think Cartoon Network website is pretty safe, and was wondering - if she is such an expert, why does she think it isn't?
Thanks.

Women. She has more than 20 years of IT exp and still she is more afraid to open a link but not afraid to go dinner with the sender of the link .

But I know why she is afraid of opening Cartoon network website. Even I am pretty scared. I have two neighbors kid who always watches cartoon with big loud sounds. Same episode again and again.

 

[Cowpipe]

the worst i had was:

highly distress phone call from a known client: "Umbra, my computer is out, and i have a presentation in 15mn ! come here and fix it asap please"
me ( on site , and after a one minute inspection): "you should plug in your computer....before starting it"
the desperate client: "how much will be the bill?"
me: "you are free tonight?"
her: "sure , what time?"



i love my job

I've had that before, the very thankful woman later became my partner... The trick is never tell them how to prevent these issues from happening again, otherwise they'll stop needing you to help them

 

[Deleted member 178]

The trick is never tell them how to prevent these issues from happening again, otherwise they'll stop needing you to help them

hahahaha exactlyyyyyy !

 

[Prorootect]

Some links that respond at the topic title:

Free Online On-demand URL Security Scanners : http://malwaretips.com/threads/free-online-on-demand-url-security-scanners.5234/

Website URL screenshot thumbnail service : http://malwaretips.com/threads/website-url-screenshot-thumbnail-service.15599/

Get the Long Real True Original Expanded and Unshorten URL link : http://malwaretips.com/threads/get-the-long-real-true-original-expanded-and-unshorten-url-link.5517/