Suspicious Link Detector

Reveal a link's real hostname, redirects, encoding, credentials, punycode, and structural warning signs.

Workspace

Guide

How to use

  1. Paste the complete link or hostname and review the destination before taking any action.
  2. Confirm the true hostname, protocol, port, path, Unicode form, and ASCII punycode form.
  3. Review warnings for embedded credentials, lookalike characters, encoding, redirects, nested links, and risky protocols.
  4. Use a separate trusted channel to verify unexpected links before visiting them.
Help

Frequently asked questions

How do I identify the true hostname?

Look at the hostname shown in the result and read it from right to left. Be cautious when trusted-looking words appear only in a subdomain or before an @ symbol.

What is punycode?

Punycode is an ASCII representation of internationalized domain names. Some Unicode characters resemble familiar Latin letters, so the system shows both forms for comparison.

Why can text before @ be misleading?

In a URL, username and password text can appear before @. The actual hostname comes after @, even when the earlier text looks like a trusted domain.

Does a clean result prove a link is safe?

No. Structural inspection can reveal common tricks, but an ordinary-looking domain may still host malicious or compromised content.

Why are redirect parameters highlighted?

Parameters such as redirect, next, target, or return can tell one site to send the browser elsewhere. Inspect both the outer and nested destination.