We click links every day—in emails, text messages, and social media posts. But the visible text does not have to match the real destination. Before opening an unexpected URL, use the step-by-step link-safety checklist to inspect its domain and context.
What makes a link "Malicious"?
A malicious link is a URL created with the intent to harm. They typically fall into three dangerous categories:
1. Phishing
These sites pretend to be legitimate services (like your bank or email provider) to steal your
credentials. They often use typosquatting—domains that look almost right,
like g0ogle.com instead of google.com.
2. Malware Distribution
Some links initiate a "drive-by download" the moment you visit the page. This can install ransomware, keyloggers, or spyware on your device without you even clicking a "Download" button.
3. Cross-Site Scripting (XSS)
Sophisticated attackers can craft links that execute malicious code on trusted websites if those sites have vulnerabilities.
How to Spot a Dangerous Link
- Check the Domain: Look closely for misspellings or odd extensions (e.g.,
.xyzor.topwhen you expect.com). - Hover Before You Click: On desktop, hovering over a link shows the actual destination URL in the bottom corner of your browser.
- Use a Link Checker: Paste the URL into the free phishing link checker to review known threat, lookalike-domain, and hosting-reputation signals without opening it in your browser.
Real-World Example
Consider this URL:
http://www.paypal-secure-login.com.update-account.info/login
It looks like PayPal, but the actual domain is update-account.info. This is a
classic subdomain attack designed to trick you.
A scanner result is evidence, not a guarantee. New attacks may not be listed yet, so verify password, payment, and recovery-code requests through an official app or a trusted address. Read how the checker chooses Safe, Suspicious, Dangerous, and Unknown verdicts.
Continue learning
- How to check if a link is safe before clicking
- Link-checking methodology and limitations
- Link Safety Report 2026
- How submitted URLs are processed
Check a suspicious URL
Review multiple security signals before you decide whether to open the link.
Use the free link checkerStay vigilant. If a link looks suspicious, check it first.