Phishing link checker
Paste a link, or a whole message with links in it. It shows where each link really goes and the warning signs I look for in my phishing research. It never opens the link.
Nothing you type leaves this page
These are rules of thumb, not a verdict. A clean result doesn't prove a link is safe. When in doubt, type the address yourself or open the app instead. Lookalike domain and punycode checker
How it works
Paste a link or a whole message. The checker pulls out every link, works out the real domain (including tricks like text before an @ sign, disguised IP addresses and redirects inside the link), and checks it against the signs I use in my phishing detection research: brand names on the wrong domain, look-alike spellings, risky domain endings, free hosting, link shorteners and pressure words.
It never opens the link, so it's safe to check suspicious messages. It also gives you a defanged copy (hxxp, [.]) that you can share with IT without anyone clicking it by accident.
Questions people ask
How can I tell if a link is phishing?
Look at the real domain, the part just before the first single slash. If a message claims to be from your bank but the domain isn't your bank's, it's a fake. This tool finds that domain for you, even when it's hidden.
The checker found no warning signs. Is the link safe?
Not necessarily. These are rules of thumb, and new phishing sites can look clean. If a message pushes you to log in or pay, open the app or type the address yourself.
Does it check links against a blocklist?
No. It doesn't send the link anywhere, so it can't look it up in online blocklists. It judges only what the address itself shows.
More free tools
Found a bug or want another tool? Contact