Link checker: see the real site behind a link
Paste any link from a post, DM or chat to see which site it really belongs to and whether it uses common phishing tricks. The check runs on your device and never opens the link.
What does the link checker look for?
It reads the address and flags the tricks that phishing links on X and in chats use most often.
| Check | Example | Why it matters |
|---|---|---|
| Real site (last part of the address) | x.com.login-help.top is really login-help.top |
Only the end of the host name decides the site |
| Look-alike letters | twіtter.com with a Cyrillic і |
Looks identical, goes somewhere else |
| One-letter misspellings | goggle.com, paypa1.com |
Easy to miss when you are in a hurry |
| Brand names in the wrong place | banesco.com.pagos-ve.top |
The brand is decoration, not the site |
| Shorteners | bit.ly, cutt.ly, t.co |
Destination hidden |
@ in the address |
https://x.com@evil.example |
Everything before @ is ignored |
| Raw IP address | http://203.0.113.7/login |
Real services use names |
| No HTTPS | http:// |
Data travels unencrypted |
| File downloads | .apk, .exe |
Apps from links are a malware route |
| Tracking parameters | utm_source, fbclid |
Harmless, but you can remove them before sharing |
How do you use it?
- Long-press the link in X or your chat app and copy it. Do not open it.
- Paste it in the box above and press Check link.
- Read the real site name in bold. Ask yourself whether that is the site you expected.
- If there are warnings, do not log in or download anything from that link.
What are its limits?
It reads the address only, so it cannot follow shorteners, see what a page contains, or detect a real site that has been hacked.
For shortened links, the safest move is to ask the sender for the full address, or find the content by going to the official site yourself. Our guide to common scams on X explains where these links usually come from, and the account security guide explains what to do if you already typed a password.
Privacy: nothing you paste leaves your browser. The page has no analytics and stores nothing.
Frequently asked questions
Does the link checker open the link?
No. It only reads the text of the address on your device. It never visits the site, so it cannot see redirects behind a shortener.
Can it tell me a site is safe?
No tool can promise that. It catches common tricks such as look-alike spellings and misleading subdomains. A clean result means none of those were found, not that the site is trustworthy.
Why does it warn about bit.ly and other shorteners?
Shorteners hide the destination. They are used by legitimate accounts too, but you cannot know where they go until you open them.
What is a look-alike domain?
An address that uses letters from another alphabet, such as Cyrillic, or a one-letter misspelling to imitate a real site, for example paypa1.com instead of paypal.com.
Not affiliated with X Corp. Results are guidance, not a guarantee.