Check a link for phishing and malware warning signs with in-browser heuristics, plus a reputation lookup when one is configured on the server.
Internet Security & Privacy
Internet Security & Privacy Tools
These tools answer the questions people ask before they click, connect or send: is this link safe, is this address on a blocklist, is my VPN actually hiding my resolver and my real IP, does this site set its cookies and transport security correctly, and can someone forge email from this domain. They draw on public threat-intelligence lists, certificate transparency logs and the DNS records the domain itself publishes, and on what your own browser is willing to reveal.
A security verdict is only as good as its source, so every page says which lists or logs were consulted, when data was unavailable rather than negative, and where a result is a heuristic indicator rather than proof. Nothing here scans third-party systems intrusively; the checks read public records and your own connection.
Tools in this category
Take a suspicious link apart: the domain that really opens, the brand it imitates, look-alike letters and typos, and why each sign matters.
Internet Security & Privacy
Check whether an IPv4 or IPv6 address is on public DNS blocklists: SpamCop, PSBL, UCEPROTECT, Barracuda, and Spamhaus ZEN when configured.
Internet Security & Privacy
See which network your browser's traffic leaves from and whether it looks like your VPN, with steps to read your DNS resolver yourself.
Internet Security & Privacy
Find out whether WebRTC in your browser reveals a local address, or a public address other than your VPN's, using Cloudflare's public STUN server.
Internet Security & Privacy
See what any website can read about your browser — Do Not Track, GPC, storage, WebGL and canvas traits — and what the server receives from it.
Internet Security & Privacy
Grade the Set-Cookie headers of a page, or ones you paste, for Secure, HttpOnly, SameSite, prefixes, scope and lifetime, with the fix for each issue.
Internet Security & Privacy
Find every http:// script, stylesheet, frame, image or font an https:// page still loads, every form or redirect that leads to http://, and what browsers do.
Internet Security & Privacy
Check a domain against the HSTS preload list requirements — HTTPS, the HTTP redirect, the Strict-Transport-Security header — and its hstspreload.org status.
Internet Security & Privacy
List the certificates public Certificate Transparency logs have recorded for a domain and its subdomains: issuer, validity dates and the names each covers.
Internet Security & Privacy
Paste DNS query names or resolver logs and look for the patterns DNS tunnels leave: long random-looking labels, many names under one zone, TXT and NULL bursts.
Internet Security & Privacy
See how easily mail in a domain's name can be forged, from its published SPF and DMARC policies, with MX, MTA-STS and BIMI and optional header checks.
Internet Security & Privacy