Links that try to run code instead of opening a site

What it is

A URL scheme tells the device what kind of action to take. Some schemes open websites; others can trigger apps, files, scripts, or system actions.

Why it matters

Dangerous schemes can move a user from browsing into execution. That changes the risk from reading a page to running an action on the device.

Warning signs

• The link starts with something other than http: or https:.
• The link tries to open a script, app command, file, shell, or phone action unexpectedly.
• The page asks you to approve an external application launch.
• The action would run code, open a local file, or start a call instead of showing a web page.

What to do

1. Cancel unexpected app, file, command, or script prompts.
2. Check whether the action matches what you were trying to do.
3. Use the official application or website directly.
4. Ask IT before approving links that launch remote access, scripts, or device-management tools.

Examples

Risky: A page asks you to run a command or open a local helper app to fix an account problem.

Safer: Close the page and open the real vendor application yourself.

Risky: A link opens a file or script prompt when you expected a normal article.

Safer: Cancel the prompt and report the page.

Common mistakes

• Clicking through browser prompts without reading them.
• Treating app-launch links as normal websites.
• Allowing a page to open a local helper app after a scare message.

Key takeaway: A safe learning link should open a normal web page, not ask your device to run something.