Skip to content

PhishLens · by BugSnaps

Free to use · No account required

Investigate suspicious links before you click.

A suspicious link deserves a second look. Unpack the address, explore the evidence, and make a more informed next move.

Your initial review stays in your browser. External checks run only when you choose them.

Review suspicious messages with your team

Submit messages, record decisions, and revisit previous reviews.

Open team inbox

PhishLens workspace

A closer look at suspicious links

Local review first

Start an investigation

A little context goes a long way.

Paste the link you want to understand. Your initial review stays in this browser.

Paste the address shown in the message. Enter its actual link destination above; plain text cannot reveal it.

Paste only relevant text. Leave out passwords, codes and other sensitive information.

Don’t have a link handy? Try an example

Results are signals to investigate, not proof that a link is safe or malicious. The destination is never visited.

Local review first. Optional checks explain what they share.

Evidence to guide your next step

A clearer first look

A little more context for an unfamiliar link.

A focused workflow for reviewing details that are easy to miss.

01 / 03

Read the link

Review URL structures, domain boundaries and embedded destinations locally, one at a time or in batches of 100.

02 / 03

Add context

Choose whether to check domain intelligence, registration and infrastructure, or Cloudflare DNS filtering.

03 / 03

Keep the evidence

Review the signals and their limits, then export a report that omits the complete URL and its query.

Know the boundaries

Evidence helps. It doesn’t guarantee safety.

URL patterns are clues, not proof. Dangerous links can look ordinary, and legitimate links can trigger warnings. The optional PhishDestroy and Cloudflare checks cover domains, not complete URL reputation or page contents. Provider results may be unavailable, incomplete or outdated.

Stay a step ahead

When in doubt, go directly.

PhishLens does not visit the destination, follow redirects, inspect page content, or verify domain ownership. If a message is unexpected, contact the sender through a known channel or navigate to the service using an address you already trust.

Investigate without opening the link.

Learn how to interpret an address, verify an unexpected request and respond if you have already interacted with it.

Read the suspicious URL guide

Phishing link assessment guides

Practical workflows, examples and limits to help you interpret your results.