How to check a suspicious link for phishing.

Start with the real domain

Read the hostname from right to left. Attackers add trusted brand names to the beginning of a malicious address, use extra hyphens, swap letters or hide the destination behind a short link.

• Compare spelling with the organization’s official domain.
• Watch for visually similar characters and unusual subdomains.
• Treat unexpected login, payment and document links as higher risk.
• HTTPS only means the connection is encrypted; it does not prove the site is legitimate.

Check context, redirects and behavior

Ask why you received the link and whether the request makes sense. A page that immediately redirects, opens several tabs, forces a download or asks for credentials deserves extra scrutiny.

Safer next step

Open the service from a saved bookmark or type its known address manually. Contact the sender through another channel when the request involves money, credentials or sensitive files.