Visualize URL security threats. Detect multi-layer encoding, phishing domains, query parameter analysis, and URL/Base64 encoding & decoding.
Paste or type a URL into the input field. Use the Sample button to try an example.
Security warnings, URL structure, query parameters, and encoding layers are displayed automatically.
Use the tools at the bottom to manually perform URL encoding/decoding or Base64 encoding/decoding.
All processing happens in your browser. URLs and text are never sent to a server.
A tool to visualize security risks hidden in URLs. Automatically detects threats such as phishing attacks, XSS, and open redirects, and provides detailed analysis of URL structure.
A state where a URL has been encoded multiple times. This technique is commonly used by attackers to bypass WAFs (Web Application Firewalls), where repeated decoding may reveal a malicious URL.
An attack that impersonates legitimate domains using visually similar but different characters (e.g., Cyrillic 'а' vs Latin 'a'). A URL that looks like apple.com may actually be a different domain.
No, all processing happens entirely in your browser. URLs and text you enter are never transmitted externally.
The developer URL Encoder is a simple encoding/decoding conversion tool. This tool focuses on security analysis, providing phishing detection, multi-layer encoding detection, and threat visualization features.