The answer is not black and white, although there are certain indicators that make an email very likely to be malicious. In this case, record the ultimate dest

The answer is not black and white, although there are certain indicators that make an email very likely to be malicious. In this case, record the ultimate destination of the link in an isolated browser session (to prevent a possible CSRF attack), then make your judgement from there.