Link Safety Checker

How the checker works

Every URL is scored against a curated set of phishing and malware signals used by security teams: protocol strength, suspicious top-level domains, homograph and punycode attacks, embedded credentials, IP-address hosts, excessive subdomains, known URL shorteners, sensitive keywords in the path, and more. All checks run in your browser — nothing is uploaded.

For a definitive answer, click Run full scan to combine these heuristics with our server-side reputation, SSL, DNS and blacklist checks.

Signs a link is unsafe

• The URL uses http:// instead of https://.
• The domain contains non-ASCII characters that look like Latin letters (homograph attack).
• The URL includes a username or password (e.g. https://user:pass@host).
• The host is a raw IP address instead of a domain name.
• The domain uses a spam-heavy TLD such as .zip, .mov, .top or .xyz.
• The link is a shortener (bit.ly, tinyurl, t.co) hiding the real destination.
• The path contains urgent or sensitive keywords like verify, login, reset paired with a brand name.

Is this link safe to click?

We run 20+ heuristic checks locally in your browser (protocol, TLD, homograph/punycode, shorteners, credentials, IP hosts, suspicious keywords) and combine them with a full remote reputation and SSL scan for a verdict.

Do you follow redirects?

Can you detect phishing?

Is my URL stored or shared?

What makes a URL suspicious?

Is a short URL like bit.ly safe?

Does HTTPS mean a link is safe?

How do I check a link on mobile?

Related guides

More tools