Is this link really safe?

Instantly check any URL for malware, phishing, fraud, or scams. Protect yourself from malicious websites with ESET’s free, easy-to-use link checker tool.

Over 3.4 billion phishing emails are sent every day.
(Source)

30% of phishing emails contain a dangerous link.
(Source)

74% of security breaches are caused by human error or social engineering. (Source)

Click rates on phishing links have nearly doubled year-over-year. (Source)

Safe browsing tips & tricks

Staying safe online requires more than just good instincts and common sense. Cybercriminals use sophisticated tactics to make scam links look convincing.

Here’s how to spot the red flags and avoid falling for the most common traps:

Scrutinize the URL — Look for Subtle Tricks

Typosquatting

  • Scammers register domains with slight misspellings or lookalike characters (e.g., “micros0ft.com” instead of “microsoft.com”, using a zero instead of “o”).

Extra words or subdomains

  • Fake sites often add words like “-security”, “-verify”, or
    “-login” (e.g., “paypal-login.com” instead of “paypal.com”).

Strange domain extensions

  • Official sites rarely use unusual TLDs (like “.info”, “.biz”, or “.top”) for critical services.

Non-HTTPS URLs

  • Modern, reputable sites should use HTTPS. Be wary if the link is only HTTP or shows a browser warning.
Inspect the Message That Contains the Link

Unexpected sender

  • Emails or messages from unfamiliar senders—especially those claiming urgency or requesting sensitive info—are high risk.

Spoofed addresses

  • Attackers may fake “From” addresses to appear legitimate (e.g., “security@paypa1.com” with a number “1”).

Urgency and scare tactics

  • Warnings like “Your account will be locked!” or “Immediate action required!” are common in phishing attempts.

Generic greetings

  • Scams often use “Dear customer” instead of your real name.

Suspicious attachments

  • Reputable companies rarely send unsolicited attachments. Avoid clicking links in such emails.
Check Website Content for Warning Signs

Poor grammar and spelling

  • Many scam sites are riddled with errors—an instant red flag for fake pages.

Strange design or outdated branding

  • Out-of-date logos or layouts often indicate a fraudulent clone.

Requests for sensitive info

  • Legitimate companies never ask for full passwords, credit card numbers, or personal information via email or forms on suspicious sites.

Lack of company info

  • Missing “About” pages, contact details, or privacy policies are warning signs.
Practical Examples

Example 1

  • You get an email from “Apple Support” warning that your account will be locked. The link inside leads to apple-support-login.com (not apple.com).
  • Red flag: Domain does not match official site; urgency and request for login credentials.

Example 2

  • A message from your “bank” asks you to “verify unusual activity.” The URL is bankofanerica.com (note the “n” instead of “m”).
  • Red flag: Typosquatting in the domain name.

Example 3

  • A text message says “Your package is on hold, track here: http://bit.ly/xyz”.
  • Red flag: Uses a URL shortener, which can hide malicious links; unsolicited message.
What else can you do?

Hover before you click

  • On desktop, move your mouse over links to preview the true destination before clicking.

Double-check in a new tab

  • Manually type official website URLs into your browser instead of clicking links in messages.

Use a reputable link checker

  • Tools like ESET Link Checker can instantly scan suspicious URLs for threats.

Keep security software up to date

  • Automated protection will block many dangerous links before you can click.

Frequently Asked Questions

How do I check if a website is legit?

  • Step 1: Use ESET Link Checker to scan the URL for threats, phishing, and fake sites.
  • Step 2: Inspect the domain name for minor changes, added words, or strange endings (e.g., secure-login-paypal.com instead of paypal.com). 
  • Step 3: Look for a secure connection (the padlock icon and “https://”).
  • Step 4: Search for company contact details, a privacy policy, and verifiable business information.
  • Step 5: Read reviews on independent sources (like Trustpilot or BBB) before entering personal details.
  • Tip: If you receive a suspicious link by email or text, type the company’s official URL into your browser manually.

How do I know if a website is not trustworthy?

Red flags to watch for:

  • Unusual or misspelled URLs (e.g., “amaz0n.com”).
  • Generic greetings (“Dear user”).
  • Bad grammar, spelling mistakes, or odd layouts.
  • Pop-ups demanding urgent action or asking for sensitive data.
  • Missing “About Us,” contact information, or privacy policy.

Practical steps:

  • Use ESET Link Checker for an immediate safety verdict.
  • Hover over links to preview their true destination.
  • Compare the site’s design with what you see from official sources.
  • Search for the website’s reputation using review platforms or scam reporting sites.

How can I check for online scammers?

  • Use ESET Link Checker to scan any link or website before clicking.
  • Google the company or website name with the word “scam” or “review” to see if others have reported issues.
  • Check for reviews on reputable review sites and security forums.
  • Reverse search suspicious images or email addresses to identify reused scam assets.
  • Check the domain's WHOIS information (e.g., newly registered domains with hidden ownership can be a warning sign).
  • If contacted out of the blue (by “support,” “bank,” or “delivery”):
    • Do not click links; verify by contacting the organization directly using official channels.

Why use ESET Link Checker?

  • Quickly identify scam websites and fraudulent URLs.
  • Protect yourself from malware, phishing attacks, and identity theft.
  • Completely free, easy-to-use, and highly accurate.

Related Articles

Explore more online safety tips on our blog:

How to browse the internet safely, both at work and at home.

Learn more

Overlooking mobile security? Here´s why you shouldn’t.

Learn more

Dangerous liaisons in cybersecurity: Attackers improve their phishing methods.

Learn more

ESET Free Tools