Tool
Phishing link check
Paste a link or a whole message. We read the link and do a few passive checks (domain age, DNS, certificates, where it redirects). We never open the page in a browser.
This is a heuristic, not a guarantee. A safe-looking result can still be a scam, and a warning can be wrong. When in doubt, open the official app or type the address yourself.
What we check
- The link text: look-alike letters and digits, fake brand or government names, hidden IP addresses, the @ trick, shorteners, free hosting, risky endings, bait words.
- Passive server checks: when the domain was registered (RDAP), DNS and mail records, its certificates (crt.sh / Cert Spotter) and the redirect path.
- Redirects: up to 5 requests, only the address and status code of each step are kept. No scripts run, no cookies are sent, no page content is stored.
- Privacy: nothing you paste is logged or stored. Only the links you click are sent. Results are cached in memory for 10 minutes.
Got a targeted phishing problem?
If your company or customers are being phished, we can help.
Contact PlixyLabs