Suspicious URL Inspector
Inspect a suspicious URL without opening it. Reveal its destination hostname, encoding, query parameters and possible embedded destinations.
URL to inspect
How it works
Parses one HTTP(S) URL using the browser’s URL parser. Shows the exact destination hostname, normalized address, decoded path and query values. Observations identify user information before @, Punycode, unusual ports, IP literals, hidden characters and possible destinations embedded in query values. Encoded query values are decoded through at most two additional layers.
The URL is never requested: no DNS, reputation, TLS or redirect checks are performed. A listed pattern can be legitimate, and the absence of patterns does not establish safety. Original input and results stay in your browser and are displayed as inert text. The limits are 8,000 characters and 100 query parameters; copying and CSV export are available.