URL safety checker
Heuristic triage only — does not call remote reputation APIs.
- Enter a URL.
Key takeaways
- Splits protocol, host, port, path and query key count.
- Warns on embedded username/password segments.
- Nudges when hostname is an IP address.
- Flags some historically abused TLDs as a reminder, not a verdict.
- Zero outbound requests — training-friendly.
Who built this
ContractorHQ is edited by Bernard Guido — 25+ years in trade operations and software. These utilities follow the same quality bar as our reviews: fast pages, honest disclosure, and tools that stay useful without selling your data.
Frequently asked questions
Does this call Google Safe Browsing?
No. Nothing leaves your tab. For real reputation checks use your browser, EDR or a dedicated threat intel product.
Why flag HTTP?
Unencrypted transport is risky on public Wi‑Fi and easy to strip-inject. Many legit internal tools still use HTTP on LAN — context matters.
Can it miss phishing?
Yes. Homoglyph domains and compromised legit hosts need human review and MFA hygiene.
Does it follow redirects?
No. Only the string you typed is parsed — no network fetch.