AltF Security

Phishing link checker

Paste a link from an SMS, WhatsApp message or email to see how it is really built. The checker shows the true domain and flags the tricks phishing links use - lookalike spellings, brand names in the wrong place, punycode, raw IP addresses, shorteners and hidden redirects. It never opens the link, so checking is safe, and it never claims a link is safe either.

  • Free, no sign-up
  • Passwords never leave your browser
  • No fake scans or scores
  • Works on mobile

Phishing link checker: questions and answers

Does this tool open the link?

No. It only reads the text of the URL in your browser. Nothing is fetched, so a malicious page cannot run.

If no issues are found, is the link safe?

Not necessarily. A brand-new phishing domain can look completely ordinary. The checker shows evidence about how the link is built; the safest habit is to open the company's app or type its address yourself.

What is punycode and why is it flagged?

Punycode lets domains use non-Latin letters, written as xn--. Attackers use it to register domains that look identical to real ones, such as a Cyrillic 'а' in apple.com. The checker shows the decoded form so you can see it.

Where do I report a phishing link?

In India report it at cybercrime.gov.in or sancharsaathi.gov.in (Chakshu for suspicious messages). You can also report it to Google Safe Browsing and to the company being impersonated.

Can a link be dangerous even on a real domain?

Yes. Real sites can have open redirects that forward to a phishing page; the checker flags redirect parameters pointing to another domain for this reason.

Security checks and guides

Full security check-upAll six tools, the tool directory and how each check works.Password leak checkerCheck if your password appears in known data breaches without sending it, plus a strength score and crack-time estimate. Free, private, k-anonymity based.Passphrase generatorGenerate random passphrases and passwords with your browser's secure random number generator. See the entropy of each one. Free, offline-capable, nothing stored.Website security checkTest any website's security headers (HSTS, CSP, X-Frame-Options, cookies and more), get a grade and copy the exact fix. Plus a private page code audit.Personal security checkupTake a free 24-point personal security checkup covering passwords, 2FA, devices, scams, privacy and home Wi-Fi. Get a score and your highest-impact next step.Hacked account recoveryYour email, Instagram, WhatsApp or bank account was hacked? Follow these recovery steps in order, secure your email first, and know where to report fraud in India.Data breach responseGot a data breach email or saw your service in the news? Find out what was exposed, which passwords to change, and how to avoid follow-up scams.

88 more free security and privacy tools

Focused tools for one job each, grouped by what you are trying to do. All run in your browser unless the tool says otherwise.

Passwords and sign-in

Create, test and manage the credentials that guard everything else.

Scams and phishing

Spot tricks in messages, links, QR codes and calls before they cost you.

When something goes wrong

Step-by-step help after a hack, a breach, a lost phone or a card fraud.

Devices and home network

Harden phones, computers, routers and smart devices.

See all 88 tools

AltFTool stores no passwords, links or results. Only the website check uses AltFTool's server, to read headers, and it keeps nothing.