Username/password userinfo can leak through logs, screenshots, history and referrers.
Know the link
before you trust it.
Parse the destination locally, map query parameters and surface credential, tracking, scheme, host and port signals without making a request to the target.
LOCALNO FETCHDETERMINISTIC
URL INTELLIGENCE / LOCAL ENGINE
NO REQUEST SENTV1.0
LOCAL VERDICTHIGH RISK4 PARAMS / 3 SIGNALS
01 / IDENTITYHTTPS
example.com
- PATH
- /offer/
- PORT
- DEFAULT
- FRAGMENT
- #pricing
- USERINFO
- PRESENT
02 / QUERY MAP04
TRACKINGutm_source
newsletterGoogle Analytics campaign sourceTRACKINGutm_campaign
launchGoogle Analytics campaign nameNORMALid
42Meaningful parameter preserved by Cleaner.TRACKINGfbclid
abc123Meta/Facebook click identifier03 / INSPECTION SIGNALS03
Known marketing/click identifiers can usually be removed before sharing.
The #fragment is handled client-side and is not sent as part of the HTTP request.
3 TRACKERS0 SENSITIVE PARAMS1 KEPT PARAMS0 NETWORK REQUESTS