URL Reputation Scanner
A URL reputation scanner here means structural analysis, not a threat-feed lookup. It reads a URL apart in your browser and scores the traits phishing links share: a raw IP host, punycode lookalikes, an @ that hides the real destination, a brand name pushed into a subdomain, and cheap top-level domains.
Last reviewed by the Radiatus Cloud team
Need this handled by experts?
Radiatus runs VAPT, managed SOC & security engineering for regulated teams.
How the score is built
The URL is parsed with the browser's own URL parser, then each trait adds points. The heaviest are a brand name appearing outside the registered domain (paypal in a subdomain of a random site), a raw IP address as the host, punycode in the hostname, and an @ in the URL, since everything before the @ is ignored by the browser and the real host is what follows it.
The registered-domain point
Phishing relies on the reader misjudging which part of a long hostname is the real domain. The scanner extracts and states the registered domain (the last two labels) explicitly, because login.paypal.com.secure-verify.ru is not PayPal, it is secure-verify.ru. Naming the true owner is the single most useful thing the tool outputs.
Other traits it weighs
- Risky or free TLDs (.zip, .top, .xyz, .tk and similar) that are over-represented in takedown data.
- URL shorteners, which hide the destination entirely.
- Executable or archive downloads (.exe, .scr, .zip, .hta, .iso, .msi) linked directly.
- Deep subdomain nesting and hyphen-heavy hostnames typical of auto-registered lookalikes.
- Credential-themed words (login, verify, secure, wallet) on an unfamiliar domain.
What a clean result means
Only that the structure holds no red flags. A well-made phishing page on a compromised legitimate domain with HTTPS scores low here. Structure is one signal; check the same URL against Google Safe Browsing, which reflects Google's live blocklist, before trusting it.
Related tools
- Google Safe Browsing Checker — Check whether Google Safe Browsing currently lists a URL for malware, phishing or unwanted software, and what to do if your own site is flagged.
- Malware Hash Checker — Look up a file hash against known-malware intelligence, and read the result correctly.
- SPF Record Checker — Check an SPF record for syntax, lookup limits and the mistakes that cause mail to fail.
- DMARC Record Checker — Check a DMARC record's policy, alignment mode and reporting addresses.
Frequently Asked Questions
Does it check the URL against a blocklist?
No. It performs no network request. The analysis is purely structural, based on the URL text, so it works offline and reveals nothing about what you are checking. For blocklist status, use the Google Safe Browsing checker.
Why does the tool show a registered domain?
Because phishing works by making a long hostname look like a trusted brand. The registered domain, the last two labels, is who you are actually connecting to. Reading it defeats most lookalike URLs at a glance.
Is HTTPS a sign a link is safe?
No longer. Free certificates mean most phishing sites now use HTTPS. Its absence is a mild negative; its presence proves almost nothing, which is why it carries little weight here.
What is the @ trick?
In a URL, anything before an @ is treated as user information and ignored for routing. So https://paypal.com@evil.example loads evil.example, not PayPal. The scanner flags any @ in the URL for this reason.
Can a safe-looking score be wrong?
Yes. A phishing page hosted on a hacked but reputable domain has clean structure. Treat a low score as absence of obvious tricks, not proof of safety, and combine it with a reputation lookup.
Privacy & Security
Pattern matching done locally.
About This Tool
This tool runs entirely in your browser. No data is sent to any server, ensuring complete privacy. Simply use the interface above to get started — no registration or login required.
Disclaimer: This tool is provided "as is" without warranty of any kind. Results are for educational and utility purposes.
Related Tools
Google Safe Browsing Checker
ComplianceCheck whether Google Safe Browsing currently lists a URL for malware, phishing or unwanted software, and what to do if your own site is flagged.
Malware Hash Checker
SecurityLook up a file hash against known-malware intelligence, and read the result correctly.
SPF Record Checker
SecurityCheck an SPF record for syntax, lookup limits and the mistakes that cause mail to fail.