Purlock
Free tool · Link safety checker

Is this link safe to open?

We check it against lists of known phishing sites, follow it to where it really ends, and look for signs like a fake brand name or a domain registered days ago. We never open anything already known to be harmful.

Try:

Free, with no account needed.

What it checks

What you get from the link safety checker

  • Known scams

    Checked against a list of hundreds of thousands of phishing sites, refreshed daily.

  • The real destination

    Short links and redirects are followed to the end, and every stop gets checked.

  • Fake brands

    paypa1.com, paypal-login.com and paypal.com.example.xyz all get caught.

  • Brand new domains

    Most scam sites are days old, so we check when the domain was registered.

  • Password traps

    A page asking for a password while calling itself a brand it isn't gets flagged.

  • An honest answer

    We tell you what we found. We never call a link safe, because no tool can know that.

For developers

Three lines from your own code

Every tool is also an API, with one simple answer format. Keep your key on your server.

JavaScript

const res = await fetch("https://www.purlock.com/v1/tools/link-safety-checker?target=https%3A%2F%2Fexample.com%2F", {
  headers: { authorization: `Bearer ${process.env.PURLOCK_API_KEY}` },
});
const report = await res.json();

Prompt for Cursor or Lovable

Add a call to the Purlock Link safety checker API on the server side of this app. Send GET https://www.purlock.com/v1/tools/link-safety-checker?target=VALUE with the header "Authorization: Bearer" and the PURLOCK_API_KEY environment variable. The JSON answer has status ("good", "attention" or "bad"), headline, checks (each with level, title, detail, fix) and data. If the call fails or times out after 3 seconds, carry on as if it wasn't there. Never put the API key in client code.

Free plan: 100 calls a month. Individual: 5,000. Business: 25,000.

FAQ

Questions, answered

How do I know if a link is safe?
Paste it above. We can't promise a link is safe, because new scam sites appear every day, but we can tell you if it's a known scam or shows the usual warning signs. Be careful with any link asking for passwords or payment.
Is it safe to check a link here?
Yes. We open it on our servers, not on your device, and we only read it. A link that's already known to be harmful doesn't get opened at all.
Can I see where a short link goes?
Yes. We follow bit.ly, TinyURL and other short links through every redirect, and show you each step and where it ends.
It says my site is dangerous. What now?
Lists can be out of date, so a site that's been cleaned up may still appear. Run the website malware check, fix anything it finds, and ask the list to remove you. If you think we got it wrong, email hello@purlock.com.
Can I use this in my own app?
Yes. The link API checks links people submit to your app, one at a time or up to 100 at once, with your own rules for what to block.

More free tools

Use it from your own code

Get a free API key with 100 calls a month. No card needed.

Get your API key