Tool

Phishing link check

Paste a link or a whole message. We read the link and do a few passive checks (domain age, DNS, certificates, where it redirects). We never open the page in a browser.

This is a heuristic, not a guarantee. A safe-looking result can still be a scam, and a warning can be wrong. When in doubt, open the official app or type the address yourself.

What we check
  • The link text: look-alike letters and digits, fake brand or government names, hidden IP addresses, the @ trick, shorteners, free hosting, risky endings, bait words.
  • Passive server checks: when the domain was registered (RDAP), DNS and mail records, its certificates (crt.sh / Cert Spotter) and the redirect path.
  • Redirects: up to 5 requests, only the address and status code of each step are kept. No scripts run, no cookies are sent, no page content is stored.
  • Privacy: nothing you paste is logged or stored. Only the links you click are sent. Results are cached in memory for 10 minutes.

Got a targeted phishing problem?

If your company or customers are being phished, we can help.

Contact PlixyLabs