So https://totallynoscam.com/pinkypromise/twitter.com/gotem is like totally fine, right? As long as I got a valid SSL cert for my super legit totallynoscam.com domain

(Bonus annoying: They included an extra period at the end within the quotation marks. Taken literally, none of their own links would fit that rule.)