Every day, millions of people click malicious URLs without knowing it. Phishing pages look legitimate. Shortened links hide their destination. Freshly registered domains slip past blockers.

I got tired of copy-pasting URLs into clunky online scanners and waiting 10 seconds for a result — so I built SnifURL.

Live

GitHub

What is SnifURL?

SnifURL is a real-time URL threat analyzer. You paste a URL, it runs it through 13 heuristic checks in parallel, and returns a risk score from 0 to 100 with a full breakdown of every signal it found.

No black box. No "we flagged it, trust us." Every point added or subtracted is explained.

{

"url": "https://paypa1-secure-login.tk/verify",

"score": 91,

"risk_level": "CRITICAL",

"recommendation": "Phishing almost certain — block immediately",

"details": [

"Suspicious TLD (.tk — Freenom free domain) (+18)",

"Brand impersonation detected: 'paypa1' looks like 'paypal' (+25)",

"Domain registered 3 days ago (+20)",

"Homograph character detected: '1' replacing 'l'…