How to use it
- Long-press the link in your text, chat or email and copy it without opening it, then paste it here. You can paste the whole message and every link in it is checked.
- Look at the real domain first. In
paypal.com.account-verify.topthe real domain isaccount-verify.top, not PayPal. - Press Check domain age to see when the domain was registered. Domains created days ago are a strong scam signal.
- If any warning appears, do not open the link. Contact the company through its official app or website instead, or double-check with VirusTotal or urlscan.io in one click.
Common signs of a scam link
- Lookalike names: one letter changed, as in paypa1, arnazon or g00gle.
- Brand name in front: apple.com.id-support.click uses a real name as a subdomain.
- Shortened links hide the real destination.
- Cheap domains such as .xyz, .top, .click and .icu are common in phishing.
- File downloads: never install an app (.apk) or open a file from an unexpected link.
This checker only reads the address. It never visits the site, so a clean result does not prove a site is safe. In the US you can report phishing texts by forwarding them to 7726 (SPAM).
FAQ
I already opened the link. What now?
If you did not enter anything, close the page. If you entered a password, change it on the real site and turn on two-step login. If you entered card or bank details, call your bank.
Does this tool visit the site?
No. It only analyzes the text of the address inside your browser.
How can I see where a short link goes?
Many shorteners offer a preview, for example adding + to the end of a bit.ly link. The result screen shows how for known services.
Does "no warning signs" mean safe?
It only means the address has no common red flags. Scams can still use clean-looking addresses, so verify unexpected messages through official channels.