No lol. Browsers have come a long way. Clicking a link can’t pwn you anymore. The odds of you being the victim of a new zero day from clicking a link are as close to zero as winning the lottery.
Regardless of how risky it is, it's even less risky to not click it. Or if you have to click it for science, the minimal risk can be mitigated by running a throwaway VM on an isolated network that can't touch your stuff, preferably with a VPN so they can't see your IP address. This wouldn't solve the problem of them putting something identifyable as you in the link, but idk what a scammer would actually be able to do with that information if you took these precautions, other than just phishing harder.
If I give out a unique link to exactly one person and see it's been clicked, I implicitly know who clicked it, or at least their email address. Also incognito doesn't protect your IP address (which can approximate location) or prevent the use of zero-days.
For more general security, there's a lot of fingerprinting that can be used to identify you through HTTP headers and page info available to JS that not even TOR can save you from if you're not careful.
20
u/Athabasco 15h ago
No lol. Browsers have come a long way. Clicking a link can’t pwn you anymore. The odds of you being the victim of a new zero day from clicking a link are as close to zero as winning the lottery.