PortalPoint

PortalPoint Learn

Security lessons for risky links, suspicious pages, and AI safety warnings.

A public learning hub for people who want to understand a warning before they click, sign in, download, or trust page content. Each lesson explains the risk in plain language and gives a practical decision path.

Browse lessonsStart with phishing

Plain language first

Every page starts with what the warning means, why it matters, and the safest action to take next.

Built for extension alerts

Stable lesson URLs map directly to alert signals, so a browser add-on can send users to the right explanation quickly.

Practice at the end

Each topic includes examples, a decision path, and a quick quiz so the safety habit is easier to remember.

Find the right lesson

Start with what the browser noticed.

Security alerts are easier to act on when they are grouped by behavior. Choose the closest situation and jump into the matching lesson.

How to spot phishing linksPhishing or scam link

Do not use the link as your source of truth. Use a known-good path to the account, vendor, or person instead.

Open lessonWhen a link says one site but opens anotherMismatched link text

The clickable destination matters more than the visible words. Treat a mismatch as a reason to pause.

Open lessonFake websites that imitate real brandsLookalike domain

Read the registrable domain slowly, from right to left, before entering anything sensitive.

Open lessonWhy numbered website addresses can be riskyRaw IP address link

Raw IP links are not always malicious, but they are unusual for public sign-in and payment flows.

Open lesson

Fast safety check

Three questions before trusting a page

  • Does the destination match the organization or person asking you to trust it?
  • Is it asking for credentials, payment, downloads, private context, or an automated action?
  • Can you reach the same place from a bookmark, typed address, password manager, or trusted app instead?

Learning pages for extension alerts

Use these stable URLs as Learn More destinations for the Chrome add-on. Non-alert states such as same-site navigation and trusted allowlists are intentionally excluded.

How to spot phishing linksPhishing or scam linkphishing_signalurl_phishing_signalWhen a link says one site but opens anotherMismatched link textvisible_domain_mismatchFake websites that imitate real brandsLookalike domainbrand_lookalike:*lookalike_domainWhy numbered website addresses can be riskyRaw IP address linkip_address_urlWhy links should not contain usernames or passwordsCredentials inside URLurl_embedded_credentialsLinks that try to run code instead of opening a siteDangerous URL schemedangerous_url_schemeLinks that may lead to malwareMalware-like URLurl_malware_signalWebsites that may be compromisedDefacement/compromised-site signalurl_defacement_signalPages that try to manipulate an AI assistantPrompt injectionprompt_injection_signalWhen someone asks the assistant for private contextPrivate-info boundaryaudience_boundaryprivate_memory_probeWhen a link cannot be safely checkedUnreadable or unverifiable linkunreadable_urlsafety_check_unavailablemodel_unavailable

Extension routing map

Each alert signal maps to a stable lesson URL that the browser extension can open for plain-language help.

AlertSignalsDestination
Phishing or scam linkphishing_signal, url_phishing_signal/security-learning/phishing-links
Mismatched link textvisible_domain_mismatch/security-learning/mismatched-links
Lookalike domainbrand_lookalike:*, lookalike_domain/security-learning/lookalike-domains
Raw IP address linkip_address_url/security-learning/ip-address-links
Credentials inside URLurl_embedded_credentials/security-learning/credentials-in-links
Dangerous URL schemedangerous_url_scheme/security-learning/dangerous-link-types
Malware-like URLurl_malware_signal/security-learning/malware-links
Defacement/compromised-site signalurl_defacement_signal/security-learning/compromised-websites
Prompt injectionprompt_injection_signal/security-learning/prompt-injection
Private-info boundaryaudience_boundary, private_memory_probe/security-learning/privacy-boundaries
Unreadable or unverifiable linkunreadable_url, safety_check_unavailable, model_unavailable, small_classifier_unavailable/security-learning/unverified-links