URL 안전성 스캐너 및 위협 감지기

실시간 휴리스틱 링크 분석: Punycode 문자 위조 감지, 난독화 파라미터 디코딩 및 피싱 사기 위험도 산출.

Free, no sign-upLive results, nothing stored

IncogSay Privacy & Stateless Architecture Guarantee

Stateless edge execution • Zero database retention • No user tracking or behavioral profiling

Zero-Log Verified

1Stateless Edge V8 Isolates

Every network lookup executes inside a temporary, isolated V8 sandbox deployed across Cloudflare's global edge. Each isolate is instantiated on demand, parses public DNS or TLS socket records in transient RAM, returns the result stream, and terminates immediately.

2Zero Query & IP Retention

IncogSay operates under a strict zero-retention guarantee. Target domains, submitted URLs, and user IP addresses are never written to disk, stored in relational databases, or logged in persistent files. We do not maintain historical query logs or link lookups to user identities.

3No Accounts, No Tracking Cookies

All tools are completely free and functional without registration, user logins, or account creation. We never deploy invasive session fingerprints, third-party analytics trackers that capture input payloads, or behavioral profilers. Your queries remain ephemeral and anonymous.

Compliance: Audited under GDPR Art. 5(1)(e) (Storage Limitation) & CCPA/CPRA Privacy Principles.Read full architecture documentation →

Operational Workflow — URL 안전성 스캐너 및 위협 감지기

4-Stage Diagnostic Execution

Stage 01

의심스러운 링크를 입력창에 입력합니다.

Stage 02

'URL 스캔'을 클릭하여 링크를 브라우저에 열지 않고 분석합니다.

Stage 03

위험도 점수, SSL 인증서 유무, 위조된 문자열 여부를 확인합니다.

Stage 04

위험 징후가 발견된 웹사이트에는 절대 개인정보를 입력하지 마세요.

격리된 환경에서의 안전한 링크 점검

모르는 링크를 직접 클릭하지 않고 원격 격리 환경에서 사전에 검사하면 악성 스크립트 실행이나 공격자의 표적 확인을 원천 차단할 수 있습니다.

Multi-Stage Threat Inspection Pipeline & Heuristic Vectors

Link and URL inspection uses multi-layered heuristic analysis to trace redirect hops, calculate domain entropy, and isolate phishing evasion techniques before client browser execution.

AMulti-Hop Redirect Chain Tracing

Traverses HTTP 301/302/307/308 responses, client-side meta refresh tags, and JavaScript location replacements to expose final landing pages obscured by intermediary tracker cloaks.

BShannon Entropy & Algorithmic DGA Detection

Evaluates character frequency distribution across hostnames and URL path tokens. Flags randomized strings (≥ 3.8 bits/char) characteristic of Domain Generation Algorithms and disposable payloads.

CPunycode & Mixed-Script Homograph Audit

Detects Cyrillic, Greek, and Latin cross-script visual lookalike substitutions in Internationalized Domain Names (IDNs), uncovering spoofed bank, portal, and authentication login domains.

DStateless Zero-Retention Edge Querying

Inspection executes in an isolated sandbox isolate. Neither the scanned URL, client IP address, nor response headers are written to persistent disk or forwarded to advertising telemetry.

Practical Use Cases & Diagnostic Scenarios

Common administrative and operational scenarios solved by this tool

01Phishing Incident Response & Link Triage

Safely inspect suspicious links reported by employees or customers without clicking them in a browser. Deobfuscate shortened URLs (bit.ly, tinyurl, t.co) to reveal the actual destination server before sandbox analysis.

02Auditing Marketing & Affiliate Redirect Chains

Trace complex 301, 302, and JavaScript redirect loops across ad networks, affiliate links, and campaign tracking domains. Identify broken hops, insecure intermediate HTTP downgrades, and excessive latency overhead.

03Detecting Homograph & Punycode Spoofs

Uncover lookalike domains that use Cyrillic or Greek characters to impersonate trusted banks, software vendors, and enterprise portals. Identify weaponized Internationalized Domain Names (IDNs) designed to evade human visual detection.

04Pre-Execution QR Code (Quishing) Safety Check

Decode QR codes from parking meters, physical correspondence, or emails to inspect the embedded URL payload without triggering camera-app browser navigation, protecting against mobile credential harvesting.