0of12read0 XP
The Web and Browsing Safely
You can read a web address and tell which website you are actually on.
- Time
- ~15-20 min
- Type
- concept
- Bloom
- Understand → Apply
- XP
- 100

Architecture diagram for The Web and Browsing Safely. You can read a web address and tell which website you are actually on.
You'll be able to
- You can read a web address and tell which website you are actually on.
- You can tell when a connection is private (the lock and "https") and you know what that does and does not protect.
- You can say what a cookie is and why a site uses one.
- You can download a file on purpose, find it on your computer, and confirm it came from a trusted source.
- You can spot three signs of a fake website and close the tab before you get tricked.
Key concepts · tap to reveal
1/12·Idea·Beat 1 · Hook
0%
Idea
01 / 12
The bar at the top is your safety check
Look at the top of your browser. That bar with the website name in it is the address bar. The text in it is the web address, also called the URL.
Most scams that reach you online are caught or missed right here, in this one strip of text. By the end of this card you'll do two quick checks on any site, who you're really talking to, and whether the connection is private, that catch the large majority of fakes before they can trick you.
Your task Write a prompt that asks Claude to recommend the right AI setup for a real task you're facing — then weigh its answer against this lesson, "The Web and Browsing Safely."
a strong prompt:role · context · task · format · example
Exercise · scenario
Open your browser and look at the address bar on a site you trust, like your bank or email. Find the domain, the name right before the first single slash. Say out loud who you are really on. Then check for the lock or `https`. You just did the two safety checks that catch most scams.
Deliverable
Complete the hands-on task on your own device and note what you did, so the skill sticks.
Common misconceptions
“Trusting the lock alone”
The padlock means private, not honest. Always read the domain too.
“Reading the address left to right”
Scammers stuff a familiar name on the front. The real site is the name right before the first slash, read from the right.
“Grabbing software from "free download" pages”
Get apps from the maker's own site or an official store. A surprise installer is how malware gets in.
Quiz · adaptive · 5 items
Mastery check
Match each term to its definition. Pass at 80% to earn the lesson's XP and unlock the next.
Sources
- [1]Email and Web Browser Protections (CIS Controls v8)·Email and Web Browser Protections (CIS Controls v8) (CP-257062) (n.d.) · Standards
- [2]Recognize and Report Phishing (CISA·Recognize and Report Phishing (CISA, Secure Our World) (CP-257063) (n.d.) · Standards
- [3]Corpus·Maintain and Enforce Network-Based URL Filters (CIS Controls v8, 9.3) (CP-256994) (n.d.) · Standards
- [4]Transport Layer Security Cheat Sheet (OWASP)·Transport Layer Security Cheat Sheet (OWASP) (CP-257103) (n.d.) · Standards
- [5]Encrypt Sensitive Data in Transit (CIS Controls v8·Encrypt Sensitive Data in Transit (CIS Controls v8, 3.10) (CP-257048) (n.d.) · Standards
- [6]A Prevention and a Traction System for Ransomware Attacks·A Prevention and a Traction System for Ransomware Attacks (CP-76661) (n.d.) · Research
- [7]Mozilla MDN·Mozilla MDN, "What is a URL" (n.d.) · Vendor
- [8]Mozilla MDN·Mozilla MDN, "Using HTTP cookies" (n.d.) · Vendor
- [9]NCSC·NCSC, "Shopping online securely" (n.d.) · Standards
- [10]CISA·CISA, "Recognize and Report Phishing" (n.d.) · Standards
Submit your work for review
Paste your capstone artifact below. You'll get back a 4-level rubric grade, per-criterion feedback, and three concrete edits to strengthen it.