# URL Parser

URL: https://phishdestroy.io/developer-tools/url-parser
Category: Phishing URL & domain
Where it runs: Runs locally (nothing you enter is uploaded)

Break a URL into protocol, hostname, port, path, query and fragment with the browser's own URL parser, so you can see which host a link really points to.

## Example input

Brand name before the @

```
https://paypal.com@account-verify.example/signin?session=8f3a2c&next=%2Fwallet#step-2
```

Hostname is account-verify.example: paypal.com before the @ is only a user name, and the tool does not list it as a field. The query table shows session and next, decoded to /wallet.

## FAQ

### How does it help with phishing links?

It shows the hostname the browser will actually contact. In https://paypal.com@evil.example/ the host is evil.example, decimal or hex hosts such as http://3221225985/ appear as dotted IPv4 (192.0.2.1), and lookalike Unicode domains appear in their xn-- punycode form.

### What does it not show or check?

The user name and password part of a URL is not displayed, and the tool does not follow redirects, unwrap Safe Links or rate the host. Text without a scheme, such as example.com/login, gives an Invalid URL error.

### Is the URL opened or sent anywhere?

No. Parsing uses the browser's URL API on this page; the link is never requested and nothing is uploaded.

## Related tools

- [Link Unwrapper](https://phishdestroy.io/developer-tools/link-unwrapper)
- [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker)
- [URL Encoder / Decoder](https://phishdestroy.io/developer-tools/url-encoder-decoder)
- [Invisible Character Detector](https://phishdestroy.io/developer-tools/invisible-char-detector)
- [URL Defanger & IOC Extractor](https://phishdestroy.io/developer-tools/url-defanger)
- [IPv4 Address Converter](https://phishdestroy.io/developer-tools/ip-address-converter)

All tools: https://phishdestroy.io/developer-tools