Paste a link from an email or a text message. This page checks whether its address imitates a site people sign in to, such as a bank, a delivery service or a tax office.
Nothing you paste leaves this page. The check runs in your browser.
Open your browser's developer tools (F12, or Cmd+Option+I on a Mac) and choose the Network tab. Paste a link and press Check link. No new request appears, because the page already has everything it needs. The only request this page makes on its own is a page-view count when it first loads, and that carries the page's address, never anything you type.
This checker needs JavaScript turned on. It still runs entirely in your browser.
This looks like a copy of 's address
This address uses a trick common in phishing links
Check before you sign in
This is 's address
No resemblance found
This checks the address, not the page behind it. A real site can still be hacked, or link you somewhere else.
This address doesn't resemble any of the companies and services this page knows. Many phishing links don't resemble the site they copy at all, so this is not a sign that the link is safe.
If you meant to visit , type yourself instead of using the link.
Paste a link or an address first.
This page checks web addresses (http and https) only.
That doesn't look like a web address. Paste a link such as https://www.walilock.com/download.
writes 's name with characters that look like letters. 's address is .
uses letters from another alphabet that look like Latin ones. It is not .
is one or two letters away from .
puts 's name next to words like "secure" or "login". 's address is .
contains 's name but is not one of 's addresses on the list.
uses 's name with a different ending. The list has . Large companies own many endings, so this can be genuine.
The address starts with , but the site it opens is .
The address starts with 's name, but the site it opens is .
is on a hosting service where anyone can publish a site. The address alone can't show whether this one belongs to .
is a part of 's website where anyone can publish pages and files. Being on 's website does not mean made this page.
is a link on 's website that sends visitors on to another address, which this page can't see. Being on 's website does not mean made the page it leads to.
The address mixes letters from two alphabets: is not a Latin letter.
The address has written before the real site name. The site it opens is .
The address is a number () instead of a site name. Sites you sign in to don't normally work this way.
appears after the site name, but the site is .
This address uses letters outside the Latin alphabet. Browsers may show it as .
is a link shortener, so the real destination is hidden. This page can't open it to find out, because it makes no network requests.
g1thub.com, rnicrosoft.com.paypal-secure-login.com.paypal.com.secure-login.tk opens secure-login.tk.amazn.com.About 140 companies and services that are popular in the United States, France and Japan, and that phishing often copies: banks and card companies, payment apps, delivery services, tax and benefit offices, phone companies, and the large sites most people sign in to.
When an address belongs to one of them, the page says so. That tells you who owns the address. It doesn't tell you the page behind it is safe.
The best comparison is with the sites you actually have logins for, because a phishing link only works on a site where you have an account. A web page can't see your logins, and no page should ask you to type them in to check them.
So this page uses a fixed list instead. It can recognize copies of the sites on that list, and nothing else.