How the check works
We take the domain from the address, along with its parent domains, and compare them with a published warning list of malicious domains. The page itself is never opened, so nothing on it can run.
The result names every list used, the date of its data and its licence. If a list could not be read, it appears under the lists that could not be checked.
Reading the result
Listed means the domain, or a parent of it, is on a list of reported malicious domains. Treat the link as dangerous and do not enter any details on it.
Not listed only means the domain is on no list we checked. New sites that nobody has reported yet are on no list, so this is not proof of safety.
The check covers the domain, not the page. A listed domain can be a hacked site that has since been cleaned.
Limits worth knowing
The lists are public and limited in size. They are a useful first filter, not a full security scan.
We do not follow short links or redirects. If a link was shortened, expand it first and check the final address.
Frequently asked questions
Does this open the link?
No. Only the domain in the address is compared with the lists. The page is never loaded.
The link is not listed. Is it safe?
Not necessarily. It only means nobody has reported the domain to the lists we use. Stay careful with links you did not expect.
Which lists do you use?
The result shows the name, date and licence of each list it checked. The set of lists can grow over time.
Can I check a shortened link?
Expand the link first, then check the final address. We do not follow redirects for you.