What a link safety checker does
A link safety checker is a tool that scans a web address before you visit it and tells you whether the site is known to contain malware, phishing scams, or other threats. You paste the link into the checker, it runs the address against databases of dangerous sites, and you get back a report: safe, suspicious, or dangerous.
The checker does not visit the site on your behalf or read anything. It straightforward looks up the address in lists maintained by security companies and tells you what those lists say. If a site is brand new or obscure, the checker might say it has no data — which means unknown, not safe.
These tools are useful when you receive a link from an unknown sender, when a link looks odd or misspelled, or when you want a second opinion before clicking. They are not a complete security system, but they catch many common threats.
Key Takeaways
- Link safety checkers scan a web address against threat databases and report whether the site is known to be dangerous, suspicious, or safe.
- Google Safe Browsing, URLhaus, and VirusTotal are three widely used checkers that work differently and may give you different results.
- A checker that says "no data" or "unknown" does not mean the link is safe — it means the site is too new or obscure to have a reputation yet.
- No checker catches every threat, so you should also look for signs of danger yourself: misspelled domain names, missing security locks, and requests for passwords on unexpected pages.
Three checkers that work and how they differ
Google Safe Browsing is built into Chrome, Edge, and Firefox. When you try to visit a site that Google has flagged as dangerous, your browser stops you with a warning page. You can also check a link manually by going to google.com/safebrowsing and pasting the address into the search box. Google's database is large and updated frequently, but it focuses on sites that actively spread malware or run phishing scams — not every suspicious site.
VirusTotal (virustotal.com) scans a link against 70+ different security engines at once. You paste the URL, and it shows you which engines flagged it and why. This gives you more detail than a single checker, but it also means you might see conflicting results — one engine says dangerous, another says safe. VirusTotal is useful when you want a thorough second opinion, but the results require some reading to understand.
URLhaus (urlhaus.abuse.ch) specializes in malware distribution sites. It is smaller and more focused than Google Safe Browsing, but if a site is on URLhaus, it is almost certainly dangerous. URLhaus is useful if you suspect a link is spreading malware specifically, but it will not catch phishing sites or other threats.
What the checker results actually mean
When a checker says a site is safe, it means the site is not on any known threat list. This does not mean the site is trustworthy or that nothing bad will happen if you visit — it means no security company has reported it as a source of malware or phishing. A legitimate-looking site run by scammers might still be safe according to a checker, because the scammers have not been caught yet.
When a checker says suspicious or flagged, it means at least one security engine has reported the site, but the threat is not certain. This could mean the site hosts some malicious content alongside legitimate content, or that the site was compromised and is being cleaned up. Suspicious does not always mean "do not visit" — it means "be careful and do not enter passwords or payment information."
When a checker says dangerous or malicious, it means multiple security engines agree the site is actively spreading malware, running phishing scams, or hosting other serious threats. Do not visit these sites unless you have a specific reason and know what you are doing.
When a checker says no data or unknown, it means the site is too new, too obscure, or too small for the checker to have information about it. Unknown is not the same as safe. A brand-new phishing site will show as unknown until enough people report it.
Signs of danger you can spot yourself
A link safety checker is a tool, not a may provide. You should also train yourself to spot obvious red flags. Look at the domain name — the main part of the web address. Scammers often use names that look almost like real companies: "amaz0n.com" instead of "amazon.com", or "paypa1.com" instead of "paypal.com". If the domain looks misspelled or wrong, do not click it.
Check for the security lock icon in your browser's address bar. When you visit a real website, a small lock appears next to the address, and the address starts with "https://" (not "http://"). If the lock is missing or the address shows a warning, the site is not find. Scammers often skip the security certificate to save money.
Be suspicious of links that ask you to log in or enter payment information on an unexpected page. If you receive an email saying "Your account has been compromised — click here to reset your password", do not click the link in the email. Instead, go directly to the company's website by typing the address yourself, or call their customer service number.
When a checker gives you conflicting results
If you run the same link through multiple checkers and get different answers, the most common reason is that the site is new or borderline. Google Safe Browsing might not have data yet, while VirusTotal shows one engine flagging it. In this case, trust the more cautious result — if any reputable checker says suspicious or dangerous, treat it as a warning.
Another reason for conflicts is that different checkers focus on different threats. URLhaus specializes in malware, so it might flag a site that Google Safe Browsing does not. If you are worried about a specific type of threat, use a checker that focuses on that threat.
If you see a conflict and you are not sure what to do, the safest choice is not to click the link. There are very few situations where you must click a link from an unknown source right now. If it is important, you can always contact the sender through a different method and ask them to confirm the link is real.
Checkers work best as one part of your defense
Link safety checkers catch many threats, but they are not perfect. A checker can only flag sites that have already been reported to security companies. A brand-new scam site might pass every checker because nobody has reported it yet. Checkers also cannot protect you from sites that are legitimate but have been hacked, or from sites that look real but are actually run by scammers.
Use a checker when you are unsure about a link, but also use common sense. Do not click links in unexpected emails, even if a checker says they are safe. Do not enter passwords or payment information on pages you did not navigate to yourself. Keep your browser and operating system updated, because updates patch security holes that scammers exploit. These habits together are much more effective than any single tool.
Frequently Asked Questions
Can I check a link without clicking it?
Yes. Copy the link, go to google.com/safebrowsing or virustotal.com, and paste it into the search box. The checker will scan it without you visiting the site. You can also hover over a link in your email or browser to see the actual address before clicking.
What if a checker says a site is safe but I still feel unsure?
Trust your instinct. A checker only knows about known threats. If a link came from an unexpected source, or if the email or message that contained it seemed suspicious, do not click it even if the checker says it is safe. You can always contact the sender through a different method to confirm.
Do I need to pay for a link safety checker?
No. Google Safe Browsing, VirusTotal, and URLhaus are all free. Your browser likely has a built-in checker already. Paid security tools exist, but they are not necessary for checking individual links.
If a checker says a link is dangerous, can I still visit it?
You can, but you should not unless you have a specific reason and know what you are doing. If a site is flagged as dangerous, visiting it puts your computer at risk of malware infection. If you need something from that site, contact the site owner through a different method and ask for help.
Why do different checkers give different answers for the same link?
Different checkers use different threat databases and focus on different types of danger. A site might be flagged by one security company but not another. If you see conflicting results, treat the more cautious answer as correct and do not click the link unless you are certain it is safe.