URL Checker Tool: Check If a Link Is Safe Before You Click
Paste a suspicious link into this free URL checker tool to see how risky it looks before you open it. The malicious link checker looks for common phishing and scam tricks, follows the link's redirects from our server so the page never opens on your device, and gives a low, medium or high risk rating with every warning sign it found.
Free · no sign-upHow the URL checker works
The URL checker inspects a link for the tricks phishing and scam links commonly use, then follows its redirects from our server. It fetches only the response headers, so the page never opens and nothing runs on your device.
| Result | What it means | What to do |
|---|---|---|
| Low risk | No common warning signs were found. | It isn't a guarantee of safety. Still check who sent it. |
| Medium risk | Some suspicious traits. | Verify the sender through another channel before opening. |
| High risk | Several strong warning signs. | Don't open it and don't enter any information. |
| Redirect chain | Where the link really ends up. | Check the final domain. Many scams hide it behind several hops. |
How to check if a link is safe
- Copy the link without opening it. Right-click or long-press it and choose Copy link address.
- Paste it into the URL checker and press Check link.
- Read the risk level and every warning sign listed.
- Check the final destination in the redirect chain.
- Still unsure? Contact the sender or company directly, using a phone number or website you already trust.
Warning signs of a malicious link
- A misspelled brand name, such as paypa1.com or micros0ft-support.com.
- The brand in the wrong place, such as paypal.com.secure-login.example: the real domain is the part just before the first single slash.
- Link shorteners that hide the real destination.
- Several redirects before you reach the final page.
- Urgent or threatening messages asking you to log in, pay or "verify" your account.
- Requests for passwords, codes or card details on a page you reached from a link.
A padlock or https:// doesn't make a link safe. Many phishing sites use valid SSL certificates.
What to do if you clicked a malicious link
- Close the page. Don't enter anything or download any files.
- Change your password for any account you entered on that page, and anywhere else you use the same password.
- Turn on two-factor authentication for important accounts such as email and banking.
- Watch your accounts for unusual logins or payments, and contact your bank if you entered card details.
- Report it. In the US, report scams to the FTC at ReportFraud.ftc.gov, and forward phishing emails to reportphishing@apwg.org.
URL checker vs full website safety checker
This malicious link checker looks at a link's address and redirects, which catches many phishing and scam links before you click. It doesn't download the page or scan files for malware, so a link marked low risk can still be harmful. Use it as one check alongside your judgement, and never enter passwords or payment details on a page you reached from an unexpected message.
Stop scammers using your domain
Phishing emails often pretend to come from real businesses. Check that your domain has SPF, DKIM and DMARC set up.
Suspicious URL Checker FAQ
Does the URL checker open the link?
No. We only fetch the response headers from our server to follow redirects. Nothing opens or runs in your browser.
How do I know if a link is safe?
Check the real domain (the part just before the first single slash), look for misspellings and urgent requests, and run the link through this URL checker. If in doubt, contact the company directly.
What is a malicious link?
A malicious link leads to a page built to steal your passwords or payment details, or to download harmful software. Many imitate trusted brands.
I clicked a suspicious link. What should I do?
Close the page and don't enter any data. If you entered a password, change it and turn on two-factor authentication. If you entered card details, contact your bank.
Why does a safe site show a warning?
The checker uses heuristics, which sometimes flag legitimate shortened links or unusual domains. Use your judgement and verify.
Can the URL checker detect every scam?
No. It catches common warning signs, but new scams and harmful content on otherwise normal-looking pages can be missed.
Is a link with https:// always safe?
No. https:// only means the connection is encrypted. Many phishing sites have valid certificates.
More free security tools
Email Security Checker
Check SPF, DKIM and DMARC for any domain.
Open tool →SSL/TLS Checker
Certificate expiry, trust status, protocol and cipher.
Open tool →IP Lookup
Location, ISP, ASN and reverse DNS for any IPv4 or IPv6 address.
Open tool →DNS Lookup
A, AAAA, MX, NS, TXT, CNAME, SOA and CAA records.
Open tool →VPN & Proxy Checker
Find out if an IP belongs to a VPN, proxy or data center.
Open tool →DNS & WebRTC Leak Test
Check whether your VPN leaks your real IP or DNS.
Open tool →