Suspicious link checker

Updated 6 October 2026

A link can show "paypal.com" and lead somewhere else entirely. Paste it here: the tool takes it apart without opening it and shows you the real destination.

How to read an address

In https://www.account.example.com/login, the only part that matters is the domain: example.com, just before the first /. Everything to its left, www.account., is freely chosen by the owner of example.com. Everything to its right is just a path on their site.

Scammers play on this rule: paypal.com.account-verification.top belongs to account-verification.top, not to PayPal.

The traps the tool detects

Trap	Example
Fake subdomain	`amazon.com.parcel-delivery.xyz`
The @ trick	`https://bank.com@pirate-site.com`
Disguised letters	a Cyrillic "а" instead of the Latin "a"
IP address	`http://185.220.101.4/account`
Shortened link	`bit.ly/…` hiding the destination
Redirect	`…?url=https://other-site.com`

Good habits

Do not click "just to see": a trapped page only needs you to type your credentials once.
Go through the official site: type the address yourself or use the app, then look for the information in your account.
Hover before clicking: on a computer, the real address appears at the bottom of the browser; on a phone, a long press shows it.
A clean domain proves nothing: a scammer can buy a look-alike name with a valid certificate. Check that it is exactly the domain you know.

Get a disposable address

Frequently asked questions

Does the tool open the link to test it?

No, never. It only analyzes the text of the address, in your browser. You can safely paste a dangerous link into it.

Does the https padlock prove a site is safe?

No. It only guarantees that the connection is encrypted. Phishing sites use https too, for free.

I already clicked a suspicious link, what should I do?

If you typed nothing, close the page. If you entered a password, change it immediately from the official site and turn on two-step verification; if you gave bank details, call your bank.