{"id":23472,"date":"2026-10-22T15:18:56","date_gmt":"2026-10-22T20:18:56","guid":{"rendered":"https:\/\/wp.stolaf.edu\/lits\/?p=23472"},"modified":"2026-10-22T15:19:29","modified_gmt":"2026-10-22T20:19:29","slug":"recognizing-a-phishing-url","status":"publish","type":"post","link":"https:\/\/wp.stolaf.edu\/lits\/recognizing-a-phishing-url\/","title":{"rendered":"Recognizing a Phishing URL"},"content":{"rendered":"
\n

Many types of cyber attacks rely on sending a link in a way that encourages people to trust it and click on it. In order to identify a malicious URL<\/a> it is helpful to understand the parts of a URL and how hackers can hide their intent by putting something you are expecting to see (like “stolaf,” “apple,” or “amazon”) into the wrong part of the URL.
<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

The first and most important thing to focus on is the domain part of the address. This is the stuff that comes between the two slashes and the first single slash. In this example, that\u2019s \u201cwww.en.company.com\u201d. This tells you the domain of the link.<\/p>\n\n\n\n

Most of us are familiar with Top Level Domains (TLDs) whether we know them by that name or not. Common TLDs include .com, .org, .gov, and .edu. But there are now more than 1500 TLDs. If you think it\u2019s coming from St. Olaf, the domain will most likely be \u201cstolaf.edu\u201d and not \u201cstolaf.com\u201d, \u201cstolaf.org\u201d, “stolaf.xxx” or any other TLD.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

These are examples of legitimate URLs associated with St. Olaf. The yellow parts show the domain that is hosting the resource. The green parts show the hostname for the service on that domain. The other parts are important for getting you to a particular resource, but they are less important when it comes to identifying whether the domain providing this resource is legitimate or fraudulent.<\/p>\n\n\n\n

When you log into a St. Olaf site, you will most commonly use a Google login page. Hackers can recreate the look of<\/em><\/strong> a Google login page, and they can send an email that looks like<\/em><\/strong> it\u2019s coming from Google or some other organization. But most of the time they host those fraudulent resources on an unusual domain. So, carefully look at the address bar in your browser to determine if a site is legitimate before entering your username and password. Learning how to (and taking the time to) review those URLs is a really important step in knowing whether or not to click on that link or enter your password.<\/p>\n\n\n\n

If you ever have a question about whether an email or a domain is valid, please don\u2019t hesitate to contact the sender of the email directly (not by replying to the email) and wait for confirmation from that person. You are also welcome to reach out to the Help Desk at 507-786-3830. Thank you!<\/strong><\/p>\n<\/div>","protected":false},"excerpt":{"rendered":"

Many types of cyber attacks rely on sending a link in a way that encourages people to trust it and click on it. In order to identify a malicious URL […]<\/p>\n","protected":false},"author":3478,"featured_media":23473,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_spp_custom_css":"","_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[31,29],"tags":[],"class_list":["post-23472","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","category-it"],"acf":[],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"https:\/\/i0.wp.com\/wp.stolaf.edu\/lits\/files\/2026\/10\/Anatomy-of-an-URL.jpg?fit=960%2C540&ssl=1","_links":{"self":[{"href":"https:\/\/wp.stolaf.edu\/lits\/wp-json\/wp\/v2\/posts\/23472","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wp.stolaf.edu\/lits\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/wp.stolaf.edu\/lits\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/wp.stolaf.edu\/lits\/wp-json\/wp\/v2\/users\/3478"}],"replies":[{"embeddable":true,"href":"https:\/\/wp.stolaf.edu\/lits\/wp-json\/wp\/v2\/comments?post=23472"}],"version-history":[{"count":1,"href":"https:\/\/wp.stolaf.edu\/lits\/wp-json\/wp\/v2\/posts\/23472\/revisions"}],"predecessor-version":[{"id":23475,"href":"https:\/\/wp.stolaf.edu\/lits\/wp-json\/wp\/v2\/posts\/23472\/revisions\/23475"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/wp.stolaf.edu\/lits\/wp-json\/wp\/v2\/media\/23473"}],"wp:attachment":[{"href":"https:\/\/wp.stolaf.edu\/lits\/wp-json\/wp\/v2\/media?parent=23472"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/wp.stolaf.edu\/lits\/wp-json\/wp\/v2\/categories?post=23472"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/wp.stolaf.edu\/lits\/wp-json\/wp\/v2\/tags?post=23472"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}