The message
“Your package is waiting — confirm a small redelivery fee.”
The address looks like usps-redelivery.com, but it really goes to parcel-fee.example.
The cost
A card number, typed into a checkout that ships nothing.
Before your browser opens it,
know where it goes.
Click a link in Mail, Messages, a PDF or a document and TinyRocket steps in first. It shows you the real destination behind the text, checks it against what it knows, and gets out of the way when nothing looks wrong.
14-day free trial — no card, no account. · macOS 14.4 or later.
Warns before you visit
Known-bad domains are held; look-alike signals are explained — before the page loads
Checks stay on your Mac
Analysis runs on your Mac, against a database on your disk
Cloud Check, during the free trial
Passive public domain intelligence without sending or opening the full link
Quiet by default
When nothing looks wrong, the link opens without another decision
Why this exists
The attack is a link.
A fake invoice. A package that needs a fee. A password reset you never asked for. Each can arrive as a link wearing a costume: the label says one thing, while the address says another.
The message
“Unusual sign-in detected — reset your password now.”
The address looks like signin-microsoft.com, but it really goes to reset-session.example.
The cost
A password, typed straight into the wrong hands.
The message
“Invoice overdue — open the document to dispute the charge.”
The address looks like docusign-review.com, but it really goes to document-hold.example.
The cost
Opening the “viewer” can run software you did not mean to install.
The message
“Your CEO shared ‘Q3 payroll’ — sign in to view.”
The address looks like sharepoint-share.com, but it really goes to doc-signin.example.
The cost
One borrowed sign-in later, the next payroll run has a new account number.
The attack arrives as a link, so TinyRocket reads the link first — the disguise lives in the address, and the address can be checked before your browser follows it.
Where it works
Works where you click
TinyRocket sees the links your Mac hands to its default browser.
Email
Messages
PDFs
Documents
and more
Some apps keep links inside their own built-in browser instead. What TinyRocket can and can’t see says exactly which, up front.
Privacy by design
Standard checks happen locally on your device. Cloud Check is optional and always your choice.
Stays on your Mac
Links TinyRocket receives
Leaves your Mac
Only a public registrable domain when you ask for Cloud Check
Never written down
A direct record pairing a day token or identity with a checked domain
See where a link goes before your browser does.
14-day free trial — no card, no account. 30-day refund, no questions.