URL safety checker
A URL safety checker tests the website a URL points to. Paste the address below to run Vigilbase's free check of the site's security setup: valid HTTPS, security headers, exposed files and server configuration. Before you visit, also confirm the domain in the URL is the one you expect.
The parts of a URL that matter
- Scheme: https:// encrypts the connection. http:// does not.
- Domain: the name just before the first single slash. This is who controls the page.
- Path and query: everything after the domain. Long random strings here are normal and say little about safety.
- @ signs and IP addresses in place of a name are both warning signs.
What makes a URL unsafe
- The domain imitates a brand but is not the brand's real domain.
- The site behind it has an invalid or mismatched certificate.
- The page asks you to sign in after you arrived from a message, not by typing the address.
- The download starts automatically or the file type does not match what you expected.
For site owners
If your own URLs fail the check, fix the failed items first: certificate and HTTPS redirects, then exposed files, then headers. A web application firewall such as Vigilbase Shield adds protection in front of the site.
Frequently asked questions
Does the checker visit the URL?
Yes. It makes ordinary web requests to the site, the same as a browser would, and reports what it finds.
Is this a phishing or malware blocklist?
No. It checks how securely a site is configured. It does not say whether the people running it are honest.
Is the URL checker free?
Yes. It runs on vigilbase.com at no cost after a quick email confirmation.