A typo in the domain
rnicrosoft.com instead of microsoft.com.
[ What am I trying to solve? ]
Where does this link really lead?
Paste a suspicious link. We will break it down into its components, highlight the actual domain and flag signs worth checking.
[ Tool ]
Examine a link before you click it.
We only analyse the address text, directly in your browser. We do not visit the destination page.
[ Result ]
- Protocol The connection may be encrypted, but the owner may not be trustworthy.
- Subdomain The part before the actual domain can be misleading.
- Actual domain The owner of this domain decides what content you see.
- Path Identifies a specific location on the website, not its owner.
What we noticed
Please note: The result assesses the structure of the link, not the content of the destination website. Even a link with no warnings is not automatically safe.
[ Understand ]
Learn to read a URL yourself.
Look for the part of the address immediately before the first slash. Read the actual domain from the right: the rest may just be window dressing.
https://mojebanka.cz.prihlaseni-pomoc.com/login- https://
- protocol
- mojebanka.cz.
- subdomain designed to mislead you
- prihlaseni-pomoc.com
- actual domain
- /login
- path
[ Can you spot the real domain? ]
Where would this link lead?
https://posta.cz.overeni-zasilky.info/platba
Choose the domain that actually controls the website.
[ Take action ]
The link looks suspicious. What now?
If you are unsure, the safest click is no click at all.
- 01
Do not open the link
Go to the service yourself using a bookmark or type its known address.
- 02
Verify the sender through another channel
Call them or use contact details you already know, not those in the message.
- 03
Do not enter or download anything
If you have opened the page, do not enter a password, card details or a verification code.
[ What to watch out for ]
A suspicious link often tries to look familiar.
Misleading subdomain
A familiar brand appears on the left, but the actual domain belongs to someone else.
Shortened link
Services such as bit.ly hide the destination address until you are redirected.
Punycode and lookalike characters
xn-- can hide characters from another alphabet that look similar.
Unusual domain extension
The extension alone does not confirm an attack, but stay alert if it appears alongside other warning signs.
An excessively long address
The important part may be hidden among parameters and lengthy text.
[ BOIT tools ]
Tools are useful. Knowing what you are doing is even better.
That is why our tools do more than check or generate something. We want you to come away with a little more understanding of how to protect yourself online.
We are building #BezpečnějšíČesko.