Check a suspicious link
We check a URL against technical reputation signals without visiting it on your behalf in a way that exposes your device.
Individual link check results are not indexed by search engines.
Before clicking a link that gives you pause, check it here. We analyze the URL against technical reputation signals and community reports without visiting it from your device in a way that exposes you.
How to check a suspicious link
- Paste the full URL into the field above, including `https://` if it has one.
- Click "Check link" — you never need to open the link yourself first.
- Review the result: risk level, confidence level, and where each signal came from.
- If the result isn't conclusive, use your own judgment — a technical check is one more signal, not a guarantee.
What signals are analyzed
- Matches against phishing domain/URL lists from technical sources like CERT.PL and PhishTank.
- Moderated community reports about the same link or domain.
- Characteristics of the domain itself: apparent age, whether it imitates a known brand, whether it uses a shortener.
What the results mean
- Risk summarizes how much negative signal we've found — from none to critical.
- Confidence shows how much we trust that assessment based on the number and quality of sources.
- A low or "no signals" risk is not a guarantee of safety — it only means we haven't found anything yet.
Shortened links
A shortener (bit.ly, tinyurl, and similar) hides the real destination. You can paste the shortened link directly — we check it the same way, no need to open it first to see where it leads.
Look-alike or impersonated domains
Many fraudulent links use a domain that looks like the real one, with a swapped letter, an added hyphen, or an extra word before the real domain. Always check the domain portion letter by letter, not just the link's overall look.
If you've already opened the link
If you already opened it but entered no information, checking the result here is usually enough. If you did enter a password or payment details, see what to do after clicking a suspicious link.
Limitations of this analysis
We don't visit the link in real time or analyze its visual content — the result is based on signals already known about that domain or URL. A brand-new link never seen before may not have any signal on record yet.
Frequently asked questions
How do I know if a link is suspicious?
Be wary of links that arrive unsolicited, carry unusual urgency, use a domain you don't recognize, or imitate a known brand with small differences. Check it here before clicking.
Can shortened links be checked?
Yes. Paste the shortened link as-is — you don't need to open it first to see the real destination.
Does a URL with no alerts mean it's safe?
No. It means we haven't found negative signals yet, not that it's confirmed safe. Always use your own judgment.
What does the confidence level mean?
How much we trust the result based on how many independent sources back it up — a low confidence doesn't invalidate the result, it just means there's less signal behind it.
What do I do if I've already opened the link?
It depends on whether you entered any information. See [what to do after clicking a suspicious link](/guides/what-to-do-after-clicking-a-suspicious-link) for the specific steps for your case.
How do I report a phishing URL?
Use the report button on the check result, or the general report-suspicious-activity form.