Phishing URL Checker
Paste the link before clicking and find out if it impersonates a known brand: typosquatting, homoglyphs, punycode, risky TLDs and subdomain tricks. 100% in-browser analysis.
Built by
Miguel Ángel Colorado Marin (MACM)
Built by
Miguel Ángel Colorado Marin (MACM)
Full-Stack Developer · Guadalajara, España
I develop web apps, digital tools and full projects — from design to deployment.
Phishing works through haste: a link looks like your bank, your inbox or your store, and one click is enough to fall. This checker dismantles that haste in seconds, without ever opening the destination. It decodes the real domain behind punycode, points out letter by letter the homoglyphs imitating the Latin alphabet, measures with Levenshtein distance how close it sits to the official domain of some fifty brands (PayPal, BBVA, Santander, Google, Correos…), and exposes structural tricks: user@ hidden before the domain, raw IPs, mountains of subdomains where the brand only appears at the front, cheap TLDs favored by fraudsters, and shorteners hiding the final destination. The result is a 0-100 score with explained signals and a JSON report you can keep or share. Everything runs in your browser: the URL is not visited nor queried on any server.
Features
- ✓Typosquatting: compares against ~50 brand domains (global and Spanish) with Levenshtein distance ≤ 2
- ✓Homoglyphs: table of Cyrillic, Greek and fullwidth characters mimicking Latin letters
- ✓Punycode: decodes xn-- domains with the RFC 3492 implementation
- ✓Detects hidden credentials (user@), raw IPs, risky TLDs, shorteners and brand subdomains
- ✓0-100 risk score with copyable JSON report
How do I check if a link is phishing?
- 1
Copy the link without opening it
In the email or SMS, copy the address (right click → copy link) without clicking.
- 2
Paste it into the checker
Full URL or just the domain both work; analysis is instant and local.
- 3
Read the score and signals
Every signal (typosquatting, homoglyph, punycode…) is explained with its reasoning.
- 4
When in doubt, type by hand
Reach the brand by typing its official address yourself, never through the received link.
Frequently asked questions
Does this checker visit the URL or query blocklists?
Never. All analysis is textual inside your browser: no DNS, no whois, no requests toward the analyzed domain. That's why it is safe to analyze even dangerous links.
What is typosquatting and why distance 2?
Registering a domain almost identical to a brand (paypa1.com, bbva-seguro.es) betting on user typos. Domain-malice research (IEEE / UT Austin) places most attacks within edit distance ≤ 2 of the legitimate domain.
It says low risk, can I trust it now?
A low risk means the domain uses no known impersonation techniques, not that the content is safe. A fresh, clean domain can host fraud just as an odd one can be legitimate: treat the verdict as one clue, not a guarantee.
Related tools
Embed Phishing URL Checker on your site
Add Phishing URL Checker to any web page with a simple iframe. Free, with attribution to miguelacm.es.
<iframe
src="https://miguelacm.es/embed/phishing-url-checker"
width="100%"
height="700"
frameborder="0"
title="Phishing URL Checker — miguelacm.es"
></iframe>