Cyber Decision Lab
MESSAGE & LINK CHECK

A closer look.
Before you click.

Unpack a link’s hostname and spot a few specific requests in an English message. Get concrete explanations you can check for yourself.

Your text stays in this browser. No upload. No account.
English text · Up to 5,000 characters0 / 5,000
Try an example

How the check works

Fixed rules look for three families of English requests and a few web-address features, such as text before an @, numeric hosts and familiar hostnames embedded inside another hostname. Simple negations and some quoted warnings are excluded. This is a small rule set, not an AI text detector or a complete scam detector.

Detection and false-alarm rates have not been independently measured. The spelling “passw0rd” is included; other wording, disguises and context can be missed or misinterpreted. Standalone bank-transfer requests and checks against current scam or domain-reputation databases are outside the scope of this tool.

Links must start with http://, https:// or www. inside a message. A single domain or numeric address also works. Obscured links, email headers, QR codes, attachments and other languages are not analysed. Only the first 50 web addresses are shown. For German wording, use the German version. Your text is not transferred when switching languages.

Reference hostnames: paypal.com, usps.com, chase.com, microsoft.com, amazon.com, apple.com, irs.gov and dhl.de. Matches are spelling comparisons, not endorsements. Other brands and lookalikes can be missed.

What happens to my text?

The check runs in this page, on your device. The tool does not send your text to a server or AI provider, store it, use analytics or open submitted links. Clear removes it from the page. There is no check history. Loading the page still sends technical connection data to our host. Read the privacy notice.