A link in a text looks suspicious
Paste it before you tap. We open it ourselves and tell you whether it is dangerous, with the evidence.
Observe, verify, and secure
Give us a domain or a link from a text message: we open it ourselves to check its security settings and whether it is phishing, and show you the evidence and what to do. Accuracy is published every month.
Your IP detecting… IP details →
Where to start
You run a site or a service
Find what to fix first with the full check; automate pre-release checks with MCP, the API or CI.
You look after a company's security
Only what changed, every day — impersonation and clone detection, vendor monitoring, attack surface management.
You investigate
Sign in with your agency mail, track impersonation domains case by case, draft takedown requests and evidence bundles.
What DechoNet is watching right now as of Oct 13, 09:01 PM
280.6Mcertificate issuance records read in the last 7 days1,270new domains carrying the name of 73 Korean brands (7 days)6breaches tracked · 205 brand-named domains seen after them92%detection on fresh phishing samples · legitimate sites called "danger": 0100%uptime over 30 days (498 checks)1,739actively exploited vulnerabilities (CISA KEV) matched daily48Kobserved values on 2,578 domains
New domains carrying a brand name — by sector (7 days)
- Portals335
- Public sector203
- Payments189
- Telecom151
- Couriers133
- Shopping126
- Banks93
- Crypto exchanges15
A brand name in a domain is not impersonation by itself: legitimate services are in here too, and only pages we opened and checked are called dangerous.
What a result looks like
Example expired.badssl.com a public test site with a deliberately expired certificate
C54/100
- Error Certificate — expired
- Warning Security headers — no HSTS
- Warning Mail authentication — no DMARC
- OK DNS · ports — OK
Fix first
- Renew the certificate and check that auto-renewal (ACME) is on
- Add an HSTS header (max-age=31536000)
- Publish a CAA record naming only the CAs you use
Example bank-secure-login.example/verify a made-up example link
Danger
Evidence
- A cheap domain carrying a bank's name, registered 3 days ago
- Opened on a phone: a sign-in page with a password field
- Code that sends what you type to a messenger bot
We never say "safe". The best result is "no risk signals found".
Try it →Popular tools 21 in all · free · no sign-up · See all →
Diagnose
Full security check
Nine checks at once: an A–F grade and what to fix first.
RecommendedPhishing Link Check
Paste a suspicious text; see where each link really goes.
Exposed Admin Pages
Find admin screens and test servers open to the internet.
Impersonation
How exposed your brand is to impersonation.
Lookalike Domains
Registered lookalikes of your domain name.
Analysis
SSL
Certificate, chain and TLS version, read from Seoul.
Post-Quantum TLS
Does the site offer post-quantum key exchange?
NEWHTTP
Redirect chain and security headers, graded A–F.
OWASP
The OWASP Top 10 items visible from outside.
Email deliverability
MX, SPF, DMARC, DKIM and blacklists.
DNS Lookup
All DNS records, with SPF, DMARC and DNSSEC checks.
Guides — Troubleshooting Guides
Email Deliverability Setup: SPF, DKIM, DMARC, Sender Rules405 Method Not Allowed: What It Means and How to Fix ItSPF PermError: Too Many DNS Lookups (Over 10) Fixed All guides →
Lookup results are kept to compare with the next check. Share links mask sensitive values. Privacy policy