URL unfurl
Break a URL into its scheme, punycode-decoded host, and query parameters, on your device, decoding base64-looking values and nested redirect URLs.
URL unfurl takes a URL apart: scheme, punycode-decoded host, and every query parameter. It tries a base64 decode on each value and, for a parameter named like url or redirect, reads that value as a nested URL. A base64 guess surfaces only once 85 percent of the decoded bytes print as ordinary characters. Mixed scripts get flagged as a possible homograph attack.
Questions
What does it decode automatically?
A punycode-encoded host, and any query parameter value that looks like base64.
What is the printable-ratio guard for base64?
A base64 candidate is only shown as decoded when at least 85% of its decoded bytes are printable, to avoid presenting garbled random binary as if it were text.
How does it find nested redirect URLs?
It checks parameters named like url, redirect, return, next, dest, target or goto, and tries to parse their value, or its base64-decoded form, as an absolute URL.
What homograph warnings does it show?
Mixed scripts within one hostname, and a small table of visually confusable characters, such as Cyrillic characters resembling Latin ones.
Is a homograph warning proof of phishing?
No, it is a signal worth checking, not a confirmed verdict.