Security analysis for suspicious links

Scan suspicious links before opening them

Analyze redirects, scripts, downloads, DNS, and network activity before you trust a URL.

Redirect tracing DNS & IP lookup Rule-based scoring
Live report preview Suspicious
Risk score 60
Redirects 2 hops
External domains 6
Suspicious scripts 1
60/100
  • example-login-review.net
  • www.example-login-review.net/auth
  • cdn.example-login-review.net/landing

Use cases

Designed for quick, technical review before a user trusts a destination.

Check a link before opening it

Review landing behavior, redirects, and resource loading first.

Investigate phishing URLs

Spot suspicious forms, external scripts, and obfuscation indicators.

Review suspicious redirects

Track every hop and see where the link really ends up.

Analyze third-party websites

Understand dependencies, embedded frames, and download behavior.

Analysis features

Clear, structured evidence from the first request to the final verdict.

DNS & IP

Resolve hosts, collect DNS records, and inspect primary IP data.

Redirect chain

Capture each hop manually with status codes and host transitions.

Network requests

Record final headers, response metadata, and linked resources.

Scripts

Extract external and inline scripts, then flag suspicious patterns.

External resources

Map third-party hosts, iframes, forms, and embedded content.

Security indicators

Turn evidence into a rule-based score and final verdict.

How it works

01

Enter URL

Submit any public HTTP or HTTPS target from the homepage, scan page, or API.

02

Analyze target

ScanTrico validates, resolves, fetches, traces, and parses the destination.

03

Review report

Inspect the final verdict, evidence, infrastructure data, and linked resources.

Pricing teaser

Start manually, then expand into API and team workflows.

For individuals

Starter

$29/month

  • Manual web scans
  • Shareable reports
  • Basic API access
  • Dashboard access
Most popular

Team

$99/month

  • Everything in Starter
  • Higher API limits
  • Team workflows
  • Queue processing
For larger operations

Enterprise

Custom

  • SSO and private hosting
  • Expanded retention
  • Custom connectors
  • Future sandbox modules

FAQ

Does ScanTrico open the target in a browser sandbox?

Version 1 performs bounded HTTP inspection from the server side. It does not execute JavaScript in a real browser sandbox yet, but the architecture and schema are ready for deeper sandbox phases later.

Can users share reports publicly?

Yes. Every completed scan gets a shareable public URL in the format /report/{scan_id}.

Does ScanTrico follow redirects?

Yes. Redirects are followed manually so the application can record every hop, status code, host change, and final landing URL.

How is the score calculated?

Version 1 uses a transparent rule-based score from 0 to 100. Signals include redirect length, external domains, iframe usage, inline script patterns, obfuscation clues, download behavior, HTTPS weakness, and suspicious forms.

Can this scan internal addresses?

No. The scanner blocks localhost, private ranges, cloud metadata endpoints, and disallowed ports to reduce SSRF exposure.

Pricing

Simple plans for real usage

Start free, upgrade for API access and higher limits.

Free

Free

  • 10 scans / day
  • No API access
  • Public report pages
Start scanning

Pro

$9/mo

  • 500 API scans / day
  • API access
  • Faster workflow
Upgrade to Pro