What a link safety checker does
A link safety checker is a tool that scans a web address before you visit it and tells you whether the site is known to contain malware, phishing attempts, or other threats. You paste the link into the checker, it runs the address against databases of dangerous sites, and you get a result in seconds. The checker does not visit the site on your behalf — it only looks up whether security researchers or automated systems have flagged that address as unsafe.
Most link checkers are free and work in your browser. Some are standalone websites you visit, others are browser extensions that scan links automatically as you browse, and a few are built into email clients or messaging apps. They all work the same way: they compare the link against lists of known malicious sites maintained by Google, Microsoft, Cloudflare, and other security companies.
Key Takeaways
- Google Safe Browsing and Microsoft Defender SmartScreen are the two largest link-checking databases, and most free checkers use one or both.
- A clean result does not mean a site is trustworthy — it only means no major security company has flagged it as malicious.
- Browser extensions that check links automatically are convenient but require permission to see every site you visit.
- Phishing sites that are brand new may not yet be in any database, so a safe result is not a may provide against social engineering attacks.
Free checkers you can use right now
Google Safe Browsing is the largest link-checking database in the world. You can check a single link by visiting google.com/safebrowsing/u/0/report_phishing/ and pasting the address into the form. Google also powers the warning you see in Chrome when you try to visit a flagged site — that warning appears automatically without you having to do anything.
VirusTotal (virustotal.com) scans a link against 90 different security vendors at once, so you see results from Avast, Kaspersky, Bitdefender, and dozens of others in a single report. Paste the link, wait 10 to 30 seconds, and you get a color-coded breakdown showing how many vendors flagged it. This is useful when you want a second opinion or when Google's result alone seems unclear.
URLhaus (urlhaus.abuse.ch) is a free database run by abuse.ch, a Swiss security organization. It focuses on malware distribution sites rather than phishing, so it is useful if you suspect a link leads to a file download that might be dangerous. The search is simple: paste the URL and see whether it appears in their records.
PhishTank (phishtank.com) specializes in phishing sites — pages designed to trick you into entering passwords or payment information. You can search by URL or browse recent submissions. PhishTank also offers a browser extension that warns you if you land on a known phishing page.
Browser extensions that check links automatically
If you do not want to copy and paste links into a checker every time, a browser extension can scan them for you. uBlock Origin (available for Chrome, Firefox, and Edge) blocks many malicious sites automatically as part of its ad-blocking function. Malwarebytes Browser Guard (malwarebytes.com/browserguard) runs in the background and warns you before you visit a dangerous site. Web of Trust (mywot.com) shows a colored circle next to search results and links, indicating whether the site has a good or poor reputation.
The trade-off with extensions is privacy. To check links automatically, an extension must see every site you visit. Read the privacy policy before installing one — some extensions sell anonymized browsing data to advertisers, while others keep it private. Stick to extensions from companies with a track record in security, like Malwarebytes or uBlock Origin's creator, rather than unknown developers.
What a safe result actually means
A link checker telling you a site is safe means only that no major security company has flagged it as malicious. It does not mean the site is trustworthy, legitimate, or run by honest people. A brand-new phishing site that launched this morning will pass every checker because it has not been reported yet. A site selling counterfeit goods will show as safe because it is not distributing malware.
Use a link checker as one layer of protection, not the only one. If a link came from an unexpected email, a text message, or a social media post, be suspicious even if the checker says it is safe. If the URL looks wrong — for example, "amaz0n.com" instead of "amazon.com" — do not click it. If you are being asked to log in or enter payment information, type the address directly into your browser instead of clicking the link.
When a link gets flagged as unsafe
If a checker tells you a link is dangerous, do not visit it. A flagged result means security researchers have found malware, phishing content, or a history of attacks on that site. The flag does not mean the link itself is broken or that you made a mistake — it means the destination is genuinely unsafe.
If you flagged the link yourself by mistake, or if you believe a safe site has been incorrectly flagged, you can report it. Google Safe Browsing has a form at google.com/safebrowsing/report_error/ for reporting false positives. VirusTotal lets you comment on results and provide context. These reports help security companies improve their databases.
Links in email and messaging apps
Gmail, Outlook, and other email services scan links automatically and warn you if they detect a phishing or malware site. You will see a warning banner at the top of the email or a red warning next to the link itself. These warnings use Google Safe Browsing and Microsoft Defender SmartScreen, the same databases the standalone checkers use.
Text messages and social media platforms like Facebook and Twitter also scan links, though the warnings are less visible. If you receive a suspicious link in a text or a DM, you can copy it and paste it into VirusTotal or Google Safe Browsing before clicking. Most messaging apps do not have built-in checkers, so the manual step is your best option.
Frequently Asked Questions
Can a link checker tell me if a site will steal my password?
A checker can tell you if a site is a known phishing page, but not if it is a new phishing site designed to look like your bank or email provider. If you are logging into something important, always type the address directly into your browser instead of clicking a link, even if a checker says the link is safe.
Do I need to pay for a link checker?
No. Google Safe Browsing, VirusTotal, URLhaus, and PhishTank are all free. Some paid antivirus programs include link checking as a feature, but the free tools are just as effective for basic checking.
What if different checkers give me different results?
Different security companies maintain different databases, so one checker might flag a site while another does not. If you see conflicting results, assume the flagged result is correct and avoid the link. VirusTotal shows you results from multiple vendors at once, which is useful when you want to see the full picture.
Can a link checker protect me from all malware?
No. A checker protects you from known malware sites, but not from zero-day attacks (newly discovered vulnerabilities) or malware that has not been reported yet. Keep your operating system and browser updated, use antivirus software, and do not download files from untrusted sources.
Is it safe to paste a suspicious link into a checker?
Yes. Pasting a link into a checker does not visit the site or download anything — it only sends the text of the address to the checker's database. You are not at risk by checking a link.