Suspicious Link Checker

Paste a link from an SMS, email or ad. Nothing is opened: the tool reads the address itself, shows which domain it really belongs to and flags the patterns phishing links use. You can also look up how old the domain is.

The link is never opened. Defanged links with hxxp and [.] work too.

Privacy: the tool runs in your browser. Only the domain name is sent when you use a lookup, and we don’t store it.

How to read the result

The most important line is “Real domain”. Everything before it in the address can be chosen freely by whoever owns that domain, so yourbank.com.secure-login.top belongs to secure-login.top, not to your bank. A domain registered days ago that asks for a login or card details is a strong warning sign.

What the checker can’t tell you

It does not open the page, so it can’t see what the page shows. A clean result means no obvious red flags in the address, not that the site is safe. When in doubt, go to the company’s site by typing its address yourself. Already entered details? See what to do now.

Want this watched for you, every day?

We monitor new lookalike domains, verify them by hand and take down the ones that turn into phishing sites.

Get a free scanReport a site