Tool · Phishing URL check
Is this URL a phishing attempt?
Heuristic check for suspicious URLs: look-alike domains, IDN tricks, suspect TLDs, brand impersonation, IP hosts. 13 indicators, 0–100 score, runs in your browser.
How does the analysis work?
We check the URL against 13 heuristics from the NCSC and SANS phishing literature. Each heuristic adds a penalty; the maximum total score is 100. Indicators checked:
- IDN / Punycode — Internationalized domain names with Cyrillic or accented letters that look like Latin ones.
- Suspect TLD — Top-level domains statistically overused by phishing campaigns.
- Brand impersonation — Well-known Swiss and global brand names in suspect URL positions.
- IP host — An IP address instead of a domain is practically extinct on legitimate sites in 2026.
- Missing HTTPS — Since 2018, every serious provider automatically redirects to HTTPS.
Privacy
Analysis runs exclusively in your browser. The URL you enter is not sent to our server or any third party, nothing is stored, nothing is logged.
What this check CAN'T do
A low score does NOT mean a URL is safe. Phishing sites can look professional and bypass every heuristic. The check is a quick filter, not a substitute for common sense and a modern antivirus suite with a web filter.