FAQ

URL deobfuscation is the process of decoding hidden or disguised parts of a link — such as percent-encoding, punycode, and redirect parameters — to reveal where it actually leads.

No tool can catch every phishing attempt. This tool reveals the true destination and common red flags, but always exercise caution and verify with other security measures.

Yes. All processing happens locally in your browser. We never store, log, or transmit your input.

Risk flags include punycode domains (e.g., xn--), embedded email addresses, redirect parameters pointing to different domains, and URL shorteners that hide the final destination.