A link checker can organize evidence, but a result needs interpretation. Ask what was checked and what remains unknown, rather than relying only on a score. Keep the message context alongside the URL findings.
Three different kinds of evidence
- Local signals describe the address: hostname structure, encoding and other patterns. They do not show page contents.
- Domain intelligence reflects a provider's information. An unlisted domain is not guaranteed safe.
- DNS filtering context describes a selected resolver's response. It is not a complete inspection of a destination or its redirects.
Unavailable is different from no warning
A provider outage, network error or unsupported input can prevent a check from finishing. Record it as unavailable with the timestamp. Do not silently convert it to no threats found. If a retry changes the result, retain enough context to explain which evidence changed.
Work through an invoice example
An unexpected invoice contains a normal-looking HTTPS link. PhishLens finds few structural warnings and a provider returns no domain listing. You still do not know whether the invoice is genuine, whether the sender's account was compromised or what the page requests. Confirm the invoice with the supplier through a contact method from your existing records.
Keep a repeatable review record
- Record why the message was suspicious, such as an unexpected request or changed payment destination.
- Review the hostname and local findings. Note checks you did not run.
- Record external results, errors and the assessment time.
- Document the decision and its independent basis: confirmed with a known contact, escalated, or unresolved.
Share only useful evidence
PhishLens offers a redacted report that omits the complete URL and query. Review it before sharing: a hostname or message context can still identify a customer or internal service. Keep sensitive original evidence only in an approved location.
PhishLens does not visit destinations, follow redirects or inspect page content. Its findings support a decision; they do not guarantee safety.