URL Scanner
Scan URLs for safety red flags
What is URL Scanner?
URL Scanner is a free security utility from Farvixo that lets you scan URLs for safety red flags. The value is processed locally in your browser and nothing is transmitted, stored or logged — which is the only acceptable design for a tool handling sensitive input. Free and unlimited.
How to use URL Scanner
Enter the value you want to check or generate in URL Scanner.
URL Scanner performs the analysis and explains the result in plain language rather than only showing a raw score.
Copy or download what you need. Nothing is logged or retained afterwards.
Frequently Asked Questions
What does the scanner look for?
Redirect chains, lookalike domains using substituted characters, suspicious subdomain structures, and the common patterns phishing links use — a real-looking brand name placed in a subdomain or path rather than the actual domain.
Does a clean result mean the link is safe?
No, and this matters. It means no known red flags were found. A newly created phishing page has no history to detect. Treat this as one input, not a verdict — the strongest signal remains whether you expected the message at all.
How do I read a URL myself?
Find the last dot before the first single slash — that is the real domain. In "paypal.com.secure-login.xyz/verify" the actual domain is secure-login.xyz, not PayPal. Everything to the left is chosen freely by whoever registered it.
What if I already clicked?
Clicking alone is usually harmless; entering credentials is not. If you did, change that password immediately, change it anywhere it was reused, and enable two-factor authentication on the account.
Does it open the link to check it?
It inspects the URL structure and redirect chain rather than rendering the page, so the analysis does not expose you to whatever the destination serves.
What you can use URL Scanner for
- Verifying a download matches the checksum the publisher listed
- Generating a hash while developing or testing an integration
- Checking the strength of a password or the validity of a certificate
- Security work that must not involve sending the value to a third party
URL Scanner at a glance
- Tool
- URL Scanner — Security Tools
- Purpose
- Scan URLs for safety red flags
- Input
- Text or values you enter directly
- Output
- A hash, checksum or analysis result you can copy
- Processing
- In your browser — files are never uploaded to a server
- Price
- Free, unlimited, no account required
- Limitations
- Bounded by your device's memory and CPU rather than a server quota
Tips for better results
- Compare checksums character by character, or paste both into a comparison tool. Eyeballing the first and last few is how tampering gets missed.
- MD5 and SHA-1 are fine for detecting accidental corruption but are broken for security. Use SHA-256 where integrity matters.
- Nothing you enter here is transmitted, so it is safe to check real values rather than dummy ones.
Common problems and how to fix them
The hash does not match the published one
Confirm the algorithm matches (SHA-256 against SHA-256), then re-download — a truncated download changes the hash.
Hashing a large file is slow
The whole file is read on your device. Large archives take time; leave the tab focused until it finishes.
The same input gives a different result elsewhere
Usually a trailing newline or different text encoding. Hash the exact bytes, not a copy-pasted representation.
More on Farvixo
All in One Place
Smart & Intelligent
Lightning Speed
Your Data is Safe
Work Anywhere
API & Integrations