Another thing to be cautious of: a link that supposedly comes from someone on your contact list. This is often malware. Contact them with a fresh email and ask if they sent it; if not advise them to change their password. My account gets hacked if I don't change may password often enough and I get email like, "did you send me this real estate link?" and it's a big fat NO. And I go change my password!