Find the real destination behind Safe Links, URL Defense, Mimecast and other wrappers.
New
URL Parser
Runs locally
Use URL Parser
What it does
Break a URL into protocol, hostname, port, path, query and fragment with the browser's own URL parser, so you can see which host a link really points to.
It runs entirely in your browser: nothing you enter is uploaded.
Example
Brand name before the @
https://paypal.com@account-verify.example/signin?session=8f3a2c&next=%2Fwallet#step-2https://paypal.com@account-verify.example/signin?session=8f3a2c&next=%2Fwallet#step-2Hostname is account-verify.example: paypal.com before the @ is only a user name, and the tool does not list it as a field. The query table shows session and next, decoded to /wallet.
FAQ
How does it help with phishing links?
It shows the hostname the browser will actually contact. In https://paypal.com@evil.example/ the host is evil.example, decimal or hex hosts such as http://3221225985/ appear as dotted IPv4 (192.0.2.1), and lookalike Unicode domains appear in their xn-- punycode form.
What does it not show or check?
The user name and password part of a URL is not displayed, and the tool does not follow redirects, unwrap Safe Links or rate the host. Text without a scheme, such as example.com/login, gives an Invalid URL error.
Is the URL opened or sent anywhere?
No. Parsing uses the browser's URL API on this page; the link is never requested and nothing is uploaded.