Paste a suspicious link below. This educational tool checks it against common phishing red flags and explains each one â so you learn to spot scams yourself. Everything runs in your browser; the link is never sent anywhere or visited.
đĄ Remember:
This tool checks patterns only â it cannot prove a link is safe. A link with no red flags can still be dangerous. When in doubt: do not click. Instead, open your browser and type the official website address yourself, or use the organization's official app.
About This Tool
What this tool does
The Phishing URL Analyzer helps you examine a suspicious link before you click it. Phishing attacks trick people into visiting fake websites that steal passwords, payment details, or personal information. This tool checks the link's structure for common warning signs: misleading subdomains, lookalike characters, suspicious top-level domains, URL shorteners hiding the real destination, and mismatches between the displayed text and the actual address.
It is for anyone who receives unexpected links by email, SMS, or social media and wants a second opinion. The analyzer never visits the link on your behalf in a way that submits data â it inspects the address itself, which is the safe part of the check.
No automated tool can catch every phishing attempt, and a clean result does not guarantee a link is safe. Use this analyzer as one layer of defense alongside your own judgment: consider who sent the link, whether you were expecting it, and what it is asking you to do.
How to use it
- Copy the suspicious link without clicking it. On most devices, long-press or right-click the link and choose "Copy link address".
- Paste the link into the analyzer and run the check.
- Read the findings. Pay special attention to the real domain name â attackers rely on you reading only part of the address.
- If anything looks suspicious, do not click. Instead, open the official site yourself by typing its address, or contact the sender through a trusted channel to confirm.
- Report confirmed phishing attempts to the impersonated company and to your email provider's phishing report address.
Defensive security tips
- Read the domain from right to left. In
secure-login.example.com.evil.com, the real domain is evil.com. Attackers bury the true domain after a familiar-looking name.
- Hover before you click. On desktop, hovering over a link shows its real destination. On mobile, long-press to preview the address.
- Beware of urgency. "Your account will be locked in 24 hours" is a classic pressure tactic. Legitimate companies rarely demand immediate action through links.
- Check for lookalikes. Characters like
rn can look like m, and some international characters mimic Latin letters. When in doubt, type the address yourself.
- Never enter credentials from a link. Navigate to the site manually for anything involving passwords, payments, or personal data.
FAQs
Does a clean result mean the link is definitely safe?
No. New phishing sites appear constantly, and some attacks use compromised legitimate sites that look clean to scanners. A clean result means no obvious red flags were found â you should still apply judgment and verify the sender.
What should I do if I already clicked a phishing link?
Do not enter any information. If you entered a password, change it immediately from the real site, enable two-factor authentication, and check your account for unauthorized activity. If you entered payment details, contact your bank.
Can the analyzer open the link safely for me?
The analyzer inspects the address text itself rather than loading the page, which avoids exposing your browser to the site. For deeper investigation, security professionals use isolated sandbox environments â not their everyday browser.
Should I forward suspicious emails to someone?
Yes. Most email providers have a phishing report address (for example, reportphishing@apwg.org), and companies being impersonated usually publish where to forward fakes. Reporting helps protect others.