Phishing Link Scanner

Checks a URL's structure for common phishing patterns. Does not scan for malware or check live threat-intelligence blocklists.

How to Use the Phishing Link Scanner

This free tool analyzes a submitted link’s structure using rule-based heuristics — giving you a verdict, a breakdown of specific red flags, and what to do next. It does not visit the page, scan for malware, or query live threat-intelligence databases.

Step-by-Step Instructions

  1. Suspicious URL — Paste the full link exactly as you received it. Do not click the link first — copy it from the email, SMS, or message source without visiting it.
  2. Click “Scan This Link” — Your verdict and flag breakdown are generated instantly from the link’s structure.

What You’ll Get

  • Verdict — No Red Flags Detected, Use Caution, or High Risk, based on a structural risk score
  • Red Flags Detected — Which specific structural patterns were found, such as a raw IP address instead of a domain, missing HTTPS, excessive subdomains, Punycode characters, a high-risk top-level domain, or account-related keywords in the URL path

Tips for Best Results

  • If you’re unsure how to copy a link without clicking it, right-click the link and choose “Copy link address” — this gives you the URL to paste without visiting the page.
  • Hover over any link before clicking — on desktop, the actual destination URL appears in the bottom bar of your browser. If it looks different from what the link text says, treat it as suspicious.
  • For a definitive real-time verdict, also check the URL at VirusTotal.com — paste the link there to query 70+ security engines simultaneously.
  • Even a “Likely Safe” verdict doesn’t mean 100% safe — new phishing domains can temporarily pass automated checks. When in doubt, navigate directly to the company’s website instead of clicking any link.

This tool checks the URL’s structure for patterns common in phishing links using rule-based heuristics. It does not visit the page, scan for malware, or check live threat-intelligence/blocklist databases. Never click suspicious links. For a live check, also verify with Google Safe Browsing or VirusTotal.com.