Understanding URL Parameters and Safety Tips

I recently went to a website and noticed something strange in the URL.
After the main dot com name, there was a "?" just after the forward slash "/" in the URL.
Know as "parameters" after the main dot com name, here are examples of them being used:

https://www.[could be any site].com/could be any directory/?viewas=&should_open_composer=false
&show_switched_toast=false&show_invite_to_follow=false&show_switched_tooltip=false
&show_podcast_settings=false&show_community_review_changes=false
&show_community_rollback=false&show_follower_visibility_disclosure=false
&bypass_exit_warning=true

Explanations:

There are parts of the URL that can come after the "?" called query parameters.
Parameters help customize the user experience based on specific needs or preferences.
To control behavior & webpage display, the parameters pass specific information to the server.

Each parameter is a key-value pair, separated by an equals sign (=),
and multiple parameters are separated by an ampersand (&).
See the list of common uses for parameters mentioned:

• viewas: This might control how the content is displayed, such as viewing as a guest or a registered user.
• should_open_composer: This could determine if a text editor or composer will be opened automatically.
• show_switched_toast: Controls if a notification (toast) is shown, switching between views or modes.
• show_invite_to_follow: This determines whether an invitation to follow a user or page is displayed.
• show_switched_tooltip: Controls if tooltips are shown when switching between different elements.
• show_podcast_settings: Can be used to determine whether podcast settings are displayed.
• show_community_review_changes: Control whether changes in community reviews are shown.
• show_community_rollback: Could determine if rollback options for community changes are displayed.
• show_follower_visibility_disclosure: Can control whether follower visibility settings are disclosed.
• bypass_exit_warning: This could allow bypassing any exit warnings when leaving the page.

Risks:

Query parameters can potentially be used maliciously if someone crafts a URL with harmful intent.
Code may be used maliciously, as when someone sends you a link to do something it normally could not.

Here are a few ways this could happen:

• Phishing: A URL might include parameters that make a fake website
  look more legitimate, tricking users into entering sensitive information.


• Data Manipulation: Parameters could be used to alter data on the
  server in unintended ways, potentially causing harm or unauthorized access.


• Session Hijacking: Parameters can be used to steal session tokens, allows attackers to impersonate users.


• Cross-Site Scripting (XSS): Malicious scripts can be injected into URLs, which then execute when the URL is accessed, potentially compromising user data.

While parameters are often used for tracking and custom server features, and many specific
parameters themselves are not inherently malicious, they could potentially be part of a malicious URL
(especially if they are then combined with other harmful elements). See safety tips listed below.

Important Tips for URL Safety

If someone sends you a link with many unknown parameters,
the link could redirects to a phishing site or include malicious scripts,
and it could pose any number of other risks. So, it's always important to:

A specific example to look out for is someone asking you to be friends on Facebook.
An official-looking link leads you to their page with many strange parameters activated in the URL.
So it's always a good idea to be cautious with URLs, especially when coming from unknown sources.

If a URL looks suspicious or contains unfamiliar parameters, it's best to avoid clicking on it and...

• Verify the Source: Ensure the link is from a trusted source.
• Check the URL: Look for any unusual or suspicious parts of the URL.
• Use Security Tools: Utilize URL checkers or security software to scan the link.
• What I Use: Malwarebytes Premium Non-sponsored, automatically check links before allowing URLs.

Tools to Check URLs for Malicious Intent

• VirusTotal: Analyzes URLs + file viruses, worms, trojans, and other kinds of malicious content.


• Norton Safe Web: Provides safety ratings for websites based on their security and potential threats.


• Sucuri SiteCheck: Scans websites for malware, viruses, blacklisting status, and other security issues.

Malwarebytes Premium checks links before access based on URL history, security, and potential threats.


• Google Transparency Report: Checks URLs with Google's Safe Browsing data to check if safe to visit.


• Cloudflare Radar URL Scanner: Provides detail report on security, performance, and technology of URL.

References:

• networkencyclopedia.com
• en.wikipedia.org
• pcmag.com
• hostinger.com
• example.com

It's understandable to be cautious about URLs with many parameters,
especially when they come from social media platforms like Facebook.
Again, if you ever feel uncertain about a link, it's best to err on the
side of caution and avoid clicking on it. Signed RAM, Happy Clicking!