Allows analyzing (or sharing) URLs before opening them.
About this app
This application acts as an intermediary when opening url links. When you do so, a window containing information about the url is displayed, allowing you to make changes to it as well. Specially useful when you need to open an external link either from an email, a social network app or others.
URLCheck is developed by TrianguloY, originally for personal use. It is open source (under CC BY 4.0 license), free, without any ads or trackers, light sized and using as few permissions as necessary (only the internet permission, for module checks that will only be performed when the user request them). The source code is available on GitHub too, if you want to suggest changes, perform modifications or propose a new translation: https://github.com/TrianguloY/URLCheck
The app is structured with a modular setup, you can enable/disable and reorder individual modules, which include:
* Input text: Displays the current url which can be edited manually. Can't be disabled. * History: View and revert any change from other modules, including edits from the user (typical undo/redo feature) * Log: Keeps a log of all checked urls, which you can view, edit, copy, clear... * Status code: By pressing the button a network request will be made to retrieve that url, and the status code will be displayed (ok, server error, not found...). Additionally, if it corresponds to a redirection, press the message to check the new url. The url is fetched, but not evaluated, so redirection based on javascript won't be detected. * Url Scanner: Allows you to scan the url using VirusTotal, and check the report. A free personal VirusTotal API key is needed for it to work. VirusTotal™ is a trademark of Google, Inc. * Url Cleaner: Uses the ClearURLs catalog to remove referral and useless parameters from the url. It also allows for common offline url redirections. Built-in catalog from https://docs.clearurls.xyz/latest/specs/rules/ * Unshortener: Uses https://unshorten.me/ to unshorten urls remotely. * Queries remover: Displays the decoded individual url queries, which you can remove or check. * Pattern module: Checks the url with regex patterns that warns, suggests or applies replacements. You can modify or create your own patterns, or even use user-created ones. Built-in patterns include: - Warning when contains non-ascii characters like greek letters. This can be used for phishing: googĺe.com vs google.com - Suggest replacing 'http' with 'https' - Suggest replacing Youtube, Reddit or Twitter with privacy-friendly alternatives [disabled by default] * Hosts checker: This module labels hosts, configured either by specifying them manually or by using a remote hosts-like file. You can use it to warn about dangerous or special sites. The builtin configuration specifies StevenBlack's hosts (adware/malware, fakenews, gambling and adult content) from https://github.com/StevenBlack/hosts * Debug module: Displays the intent uri, and optionally info about the ctabs (custom tabs) service. This is intended for developers. * Open module: Contains the open and share buttons. If a link can be opened with multiple apps, an arrow will be shown to let you choose. Can't be disabled.
Licensed under CC-BY-4.0, by TrianguloY.
What's New in v3.5
Imported from the F-Droid repository index.
- V 3.5
- - Improve: Allow token on Unshorten module
- - Improve: Json editor (monospace and font size)
- - Improve: Default patterns (Rickroll, twitter, eddrit, farside)
- - Internal: Translations fixes and updates
Version history
Apr 8, 2026 · 1.1 MB · Android API 19–36 · code 47
Imported from the F-Droid repository index.
- V 3.5
- - Improve: Allow token on Unshorten module
- - Improve: Json editor (monospace and font size)
- - Improve: Default patterns (Rickroll, twitter, eddrit, farside)
- - Internal: Translations fixes and updates
SHA-256 ddcbf344519bff30db9550d16f37104150b816ed401f95370d551f183a9e5520
Dec 23, 2025 · 1.1 MB · Android API 19–36 · code 46
Imported from the F-Droid repository index.
- V 3.4.1
- - Improve: Updated translations
- - Fix: Report error instead of deleting extra json elements in the editor
- - Fix: Avoid some errors when using http services
- - Internal: Several updates and minor changes
SHA-256 885e2d93d869bac8ec606b7591e5a601e571316a7299a931f033a7231899b74c
Jun 7, 2025 · 1.1 MB · Android API 19–34 · code 45
Imported from the F-Droid repository index.
- V 3.4
- - Improve: Rewritten VirusTotal integration: use api v3 and show more details (vote third place)
- - Improve: Allow app component and/or package in the open automation
- - Improve: Allow list of strings on 'regex' and 'excludeRegex' for patterns
- - Improve: $REFERRER$ for the webhook body
- - Improve: Close url editText on enter
SHA-256 9241a8e74e2dcf8d0ebdb41ce9179c9ff8bbe8da2f3f9b868e37a87d44658f8c
Will it run on your device?
78%
- Runs on a broad range of modern Android versions.
- ABI coverage is focused on newer 64-bit devices.
- Aligned with the latest Android target SDK expectations.
Installation Guide
Open Settings on your Android device
Go to Security → Unknown sources (or Install unknown apps)
Enable "Allow from this source" for your browser or file manager
Open the downloaded APK file from your Downloads folder
Tap "Install" and wait for installation to complete
Launch the app from your home screen
Make sure to re-enable Unknown Sources restrictions after installation for security.
How to install this safely
How to verify the file you downloaded
Before you install anything, confirm the file is the one described here. On a computer, run shasum -a 256 your-download.apk (macOS or Linux) or certutil -hashfile your-download.apk SHA256 (Windows), then compare the output character-for-character with the SHA-256 on this page. If a single character differs, the file is not the build we recorded — delete it.
What the signing certificate proves
Every Android app is signed with a private key that only its developer holds. The fingerprint on this page is a hash of the matching public certificate, and it proves continuity rather than identity: it tells you a build came from whoever signed the earlier ones. Android enforces this at install time — if a package claiming to be com.trianguloy.urlchecker is signed with a different key, the system will refuse to install it over your existing copy. A fingerprint that changes between releases is worth pausing on, because a repackaged app that has been modified by someone else cannot keep the original signature.
How to roll back to an earlier version
If the current release misbehaves, 3.4.1 is the last build before it. Android will not install an older version code over a newer one, so you must uninstall URLCheck first — which clears its local data unless you have a backup. Reinstall the older APK only if its signing fingerprint matches the build you already trust, and check the API range: an older release may target an Android version your device has moved past.
Why we list sources instead of hosting everything
The official store channel is almost always the right choice: it updates automatically and carries the publisher's own distribution guarantees. A direct APK is useful when a device has no store access, when a rollout has not reached your region, or when you need a specific version — and only when the publisher has authorized that copy. APKBrowse does not list pirated, cracked, or unauthorized rebuilds of URLCheck, and a listing is removed when the evidence for it stops holding up.
Get URLCheck
Every source we list for com.trianguloy.urlchecker is legality-reviewed. Pirated or cracked builds are never offered.
Other sources
F-Droid listing
officialF-Droid builds this app from source and signs it. This is its official listing, with older builds and full release notes.
Source code
verified publisherThe upstream repository this build is compiled from.
We check legality and signature continuity, but device behaviour still varies. Install at your own discretion.
App Information
Security Verification
We record provenance; we do not run malware scans. Verify the hash yourself before installing.
SHA-256 Hash
ddcbf344519bff30db9550d16f37104150b816ed401f95370d551f183a9e5520
Signing certificate
93d79b1e72d5a6b0bc6811b9bc0a83181c3510d58c11571140ff3f8a63f22174
Permissions Required
What each permission lets URLCheck do. A highlighted one is worth a second look — not necessarily wrong, just worth asking whether this app needs it.
Previous Versions
The signing certificate fingerprint for this release is on record, so a build that does not match it did not come from this publisher.
More Social apps
More from F-DroidReport a problem with this listing
A listing is only as good as its corrections. If a source is broken, a signature looks wrong, or this app should not be here, tell the moderation team.