← Back to Work
Web2025-2026

Phishing Checker

Our own URL checker, live at phishcheck.org: paste a link and it is checked against Google Safe Browsing and PhishTank and scored by heuristics on the URL itself, with every scan saved as a report you can share. Next.js 15 and Supabase.

Next.jsSupabaseSecurity

The challenge

Somebody gets a suspicious link and has nowhere quick to take it. The reputation databases exist, but they are built for tooling and API keys, not for a person who just wants to know whether clicking is a mistake.

Our approach

A single-input Next.js 15 app that queries Google Safe Browsing and PhishTank, adds heuristics on the URL structure itself, and stores each scan in Supabase under its own id, so a verdict can be forwarded as a link instead of a screenshot. Users can flag a classification they believe is wrong.

The outcome

A free public checker that turns a suspicious link into a readable verdict with a breakdown of what triggered it, running at phishcheck.org.

Phishing Checker screenshot 1