Privacy-first tool

Email Link Inspector

Paste a suspicious email and extract the links before you click.

Tool guidance

How to use this tool

The pasted email body stays in your browser. CheckLink receives only URLs you choose to scan.

Paste visible email text or HTML into the inspector.

Review the extracted URLs and domains.

Scan only the URLs you choose.

Copy suspicious URLs if you need to report them.

Display text can differ from the real href.

Short links and tracking links can hide the final destination.

Only selected URLs are sent to CheckLink's scanner.

Use Email Header Inspector if you can access full headers.

Use BEC Request Inspector for payment or vendor-change wording.

Request manual review for login, invoice, payroll, or customer-critical links.

Browser extension

Open the current page, inspect links from the browser menu, and jump into CheckLink faster without an account.

Works with Chrome and compatible Chromium-based desktop browsers. Firefox and Safari versions are not currently available.

The extension sends a URL only when you choose a scan action. It does not store scan history.

Paste suspicious email text

Your pasted email text stays in your browser. CheckLink only receives a URL if you choose to scan it.

Do not paste passwords, recovery codes, payment card numbers, private keys, or sensitive secrets.

Emails can hide risky links behind safe-looking text. Always inspect the actual destination.

No links found yet. Paste an email to extract URLs and href destinations.

A link can say checklink.ai while the href points somewhere else.

Shorteners and tracking URLs can hide the final destination.

Unexpected sign-in, account, or financial links deserve a slower review.

Pressure to act quickly is often social engineering, not proof by itself.

Pasted email text is not sent to CheckLink. Only URLs you choose to scan are sent to the scanner endpoint.