tl:dr: Check the address bar when you click on a link Make sure it starts with 'https://" (in green, with a lock icon)
Something’s wrong if you see “data:text/” at the start, rather than a secure URL
It’s an interesting trick the hackers use to hide the address bar and to fool us into thinking that we’re going to a good address rather than the bad one they supplied.