Link Safety Scanner
Check if a URL is safe before you click. Scans for red flags including suspicious redirects, domain reputation, and security configuration.
How does the Link Safety Scanner work?
Our scanner performs multiple checks on a URL to identify potential safety concerns:
- HTTPS verification — checks for encrypted connections
- Redirect analysis — detects suspicious redirect chains
- Domain analysis — flags IP-based URLs, suspicious TLDs, and lookalike domains
- Security headers — checks for HSTS, CSP, and other protective headers
- Reachability — verifies the URL actually loads
When to use this tool
Check any link before clicking — especially ones received via email, social media DMs, or messaging apps. Shortened URLs (bit.ly, t.co, etc.) are particularly worth scanning since they hide the real destination.
Signs of a suspicious link
- Lookalike domains — e.g.
paypa1.cominstead ofpaypal.com - IP addresses as URLs — legitimate sites almost never use raw IP addresses
- Excessive redirects — multiple hops are often used to evade detection
- No HTTPS — modern legitimate sites use encrypted connections
- Unusual TLDs — domains like
.xyz,.top, or.buzzare commonly used for phishing
Tips for staying safe online
- Hover over links before clicking to see the real URL in your browser's status bar
- Be extra cautious with links in emails — even if they appear to come from someone you know
- Use this tool alongside your browser's built-in safe browsing features for layered protection
Frequently Asked Questions
How can I tell if a link is safe before clicking?
Before clicking, hover to preview the URL in your browser's status bar, check the domain spelling carefully, and look for HTTPS. Shortened or unfamiliar URLs should always be scanned with a tool like this one before clicking.
What is a phishing link?
A phishing link is a deceptive URL designed to look legitimate in order to steal credentials or personal information. Common tactics include lookalike domains (paypa1.com instead of paypal.com), subdomain tricks, and URL shorteners that hide the real destination.
Are shortened URLs like bit.ly safe?
Shortened URLs hide the real destination, making it impossible to assess safety without expanding them first. Always expand and scan shortened URLs before clicking — especially ones received via email, SMS, or social media messages.
Does HTTPS mean a website is safe?
HTTPS means the connection is encrypted, not that the website is trustworthy. Phishing sites routinely use HTTPS. Always verify the full domain name carefully — the padlock icon alone is not sufficient to trust a site.