$loading...
Parse any URL into its components, URL-decode every query parameter, and flag open-redirect / SSRF candidate params and embedded credentials. For authorized security testing.
Parses entirely in your browser via the standard URL API. For use only against systems you are authorized to test.
Flags are heuristic hints for manual review — verify candidates only on authorized targets.