Here are a couple of things to watch out for concerning URLs. . .
After navigating to a website, check and confirm that the URL displayed in your browser’s address bar matches the intended destination. For example, if you were visiting the website of security vendor Sophos, the displayed address should read www.sophos.com. If you see something else like www.sophos.badurl.com, you can be sure that you have been re-directed to some other site.
Never click on a link inside an email message. If you believe that the link is valid, manually type the URL into the address bar of your browser. Again, check the displayed address a second time to ensure that you have been directed to the intended site.