Check any URL: syntax and structure, parsed components, and plain-language notes on missing HTTPS, embedded login data, spaces or unusual hosts. Everything runs in your browser.
Syntax and structure check only: the page is not loaded, and the security hints are heuristics, not a malware scan.
Paste a link and this URL validator takes it apart: protocol, host, port, path, query and fragment are parsed with the same rules browsers use, and every part is shown in the facts table. On top of the syntax check you get plain-language findings: a missing protocol, an unencrypted http address, login data in the link, whitespace from a bad copy-paste, an IP address instead of a domain, punycode names, campaign parameters such as utm_source, or a hostname that breaks the rules. Every finding is labeled OK, INFO, WARN or ERROR, so you can see at a glance whether a link is worth sharing. Local and private addresses are marked too. All checks run locally in your browser — the URL is never sent anywhere. What it does not do: it does not open the page, it does not test whether the site exists or loads, and the security hints are heuristics, not a malware scan.