Public URL check
URL virus checker
URL virus checker: scan a website link for basic risks
Quick check for a suspicious link
Paste a URL from an email, messenger or ad. URLCompass shows where the link ends after redirects, whether the site responds, whether HTTPS is used and which basic public safety signals are visible.
What may indicate risk
Missing HTTPS, an unexpected final domain, insecure forms, mixed content and missing security headers do not prove malware, but they are reasons to avoid entering passwords, one-time codes or card data.
What this check does not do
The tool does not download files, execute website code or provide a guaranteed malware verdict. For sensitive links, also use antivirus software, browser warnings, reputation databases and a manual domain check.
What to do if the link looks suspicious
Do not sign in through the page, do not install files, check the domain manually and open the official website from search or bookmarks. If it is your website, fix HTTPS, forms, headers and suspicious third-party scripts.
Example result
What the report can show before you open it
The exact values depend on the URL, but the report highlights practical signals instead of a raw technical dump.
With URLhaus connected, the report shows whether the link appears in a public threat database.
Whether HTTPS works, redirects are configured, certificate is valid and mixed content is absent.
The report shows insecure HTTP resources on an HTTPS page when found.
The report groups output into critical issues, recommended fixes and useful context.
Report sections
The scan keeps the result readable
Where the link leads
Final URL after redirects, status code, domain and HTTPS.
Unsafe input signals
Forms, password fields and data submission over HTTP.
Basic protection signals
Security headers, mixed content, server and external scripts.
FAQ
Common questions
Does URLCompass need access to the website admin area?
No. The report is built from public signals available by URL: HTML, headers, DNS, TLS, robots.txt and sitemap.xml.
Can it show exact traffic or private analytics?
No. Exact traffic requires analytics access or paid data sources. URLCompass intentionally separates public checks from private metrics.
Is this the same as a malware scanner?
No. URLCompass checks public risk signals. Reputation databases and file-level malware scanning require separate security providers.
Which URLs can be checked?
Use public http or https pages. Localhost, private IP addresses and closed admin pages are blocked to keep the checker safe.