Safe Browsing Checker
Check whether a domain is flagged for malware or phishing.
Looks up live data What you enter is sent to our server to fetch live results from public sources. Results are cached briefly.
Report a problem with this tool
About this tool
Find out whether a domain is flagged for malware or phishing. The domain is looked up through Cloudflare's security-filtering DNS, which blocks known malicious sites, and compared with a normal lookup so a missing domain is not mistaken for a blocked one. This is a quick indicator, not a full scan: a clean result does not guarantee a site is safe, and other lists such as Google Safe Browsing may know about threats this one does not.
How to use it
- Enter a domain or paste a full URL.
- Press Check domain.
- Read the verdict: flagged, not flagged, or unresolved.
How the check works
The domain is looked up twice: once through Cloudflare's normal resolver (1.1.1.1) and once through its security resolver, which answers 0.0.0.0 for domains on its malware and phishing list. If the normal lookup works and the filtered one returns 0.0.0.0, the domain is flagged.
Only the domain is checked. The path of a URL is ignored, so a single bad page on a large shared site, such as a file host or a free website builder, will not be flagged.
Other signs a website may not be safe
- A lookalike name
- Extra words, swapped letters or a different ending, such as paypal-secure-login.com. Type addresses yourself instead of clicking links in messages.
- A very new domain
- Scam shops often use domains registered weeks ago. Check the creation date with Domain WHOIS.
- The padlock alone
- HTTPS only means the connection is encrypted. Phishing sites use HTTPS too.
- Pressure and odd payments
- Countdown timers, prices far below everywhere else, or payment only by bank transfer, gift cards or crypto.
- No real contact details
- No company name, address or working phone number, and no reviews on independent sites.
If you already entered details on a flagged site
- Change the password you used, and the same password anywhere else you use it.
- Turn on two-factor authentication for that account.
- If you entered card or bank details, contact your bank straight away.
- If you downloaded anything, run a malware scan.
Common problems
- Verdict is "unresolved"
- The domain does not exist or has no address record, so there is nothing to check.
- A site you trust is flagged
- It may have been compromised or listed in error. Contact the site owner and the filter provider before visiting.
Frequently asked questions
Is "not flagged" the same as safe?
No. It only means this filter does not currently block the domain.
Does this use Google Safe Browsing?
No. It uses Cloudflare's security DNS filter. Google Safe Browsing is a separate list, used by Chrome and other browsers, which you can check on Google's Transparency Report site status page.
Does it check the full URL or only the domain?
Only the domain. If you paste a full URL, the path and query are removed before the check.