URL scanner: open a suspicious link safely
Scan a URL without visiting it. The page is fetched through an egress-locked scanner and rendered in a disposable browser, so you see the redirect chain, what it loads, what it asks for and what it serves, without any of it reaching your machine.
What a scan captures
- The path a click really takes. Every redirect hop is recorded, so a shortened or cloaked link resolves to the page that actually answers, with its address, network operator and country.
- The rendered page. A screenshot, the DOM, every HTTP request, cookies set, console output, scripts, frames and WebSocket endpoints, captured in an isolated browser rather than inferred from markup.
- Phishing signals with reasons. Brand impersonation, lookalike and internationalised domain names, known phishing kits, and forms that post credentials off-origin are each reported with the observation behind them.
- Files the page serves. A download is fetched, hashed and routed into the malware sandbox as its own sample, and the same detection engines that scan files run over the page content itself.
Brands most impersonated in scanned URLs
Domains pretending to be these brands, observed across public scans. None of the listed domains belong to the brand. The full ranking lives on the brands-under-attack directory.
- Binance phishing domains
- Paypal phishing domains
- Facebook phishing domains
- Google phishing domains
- Gmail phishing domains
- Microsoft phishing domains
Recently scanned URLs
- xezojetit.ru: unknown
- jotamaria-basemossoro.blogspot.com: unknown
- jotamaria-basemossoro.blogspot.com: unknown
- jotamaria-basemossoro.blogspot.com: unknown
- jotamaria-basemossoro.blogspot.com: unknown
- booking.blowbasketpicture.shop: unknown
- z3a.w.api.fabric.microsoft-int.com: suspicious
- www.alexoloughlinonline.com: unknown
- www.alexoloughlinonline.com: unknown
- www.alexoloughlinonline.com: unknown
- www.alexoloughlinonline.com: unknown
- amazon-service.es-teiegream.com: unknown
- ariconium.cz: unknown
- calienglish.com: unknown
- www.saltriot.com: unknown
- ryspol.cz: unknown
- asiastudy.in: unknown
- khonggianmang.com: unknown
- congnghiepxd204.vn: malicious
- nadiadsa.org: unknown
Common questions
- Will the site know I scanned it?
- The scan runs from our infrastructure rather than your address, so the target sees our scanner. Scans are not anonymised beyond that: a determined operator can identify scanner traffic.
- What if the link contains a token or password?
- Sensitive values in a URL are detected and redacted before anything is stored, and the scan is forced private so it can never become publicly readable.
- Can a clean result be wrong?
- A scan is one fetch from one vantage point. Hostile pages commonly serve different content by geography, device or referrer, or only once per visitor, so a benign observation is evidence about that fetch rather than proof about the page.