Forensic investigation platform

URL Forensics. Follow the evidence.

Identify the domain behind a link. Parse its structure and examine public DNS and registration records without opening the destination website.

DNS / Email policyWHOIS / RDAPNetwork / CertificatesSHA-256 report

Visitors: 3 free checks per day. Create a free account for 20 checks, history and PDF reports.

DNS FORENSICSsuspicious-domain.example
A record192.0.2.24
NSns1.example.net
MX10 mail.example.net
SPFv=spf1 … ~all
DMARCv=DMARC1; p=none
Created2026-09-21
ILLUSTRATIVE RECORDS · NOT A LIVE REPORTDigitpol
URL investigation

Understand the link before you follow it.

Guide · 5 min read

URL anatomy and deceptive links

Separate scheme, hostname, user information, path and query data when examining suspicious URLs.

Read resource
Method · 5 min read

Redirect chains and shortened links

Document intermediate destinations and understand why a final URL can vary between observations.

Read resource
Checklist · 6 min read

Phishing URL triage

A structured approach to suspected credential theft, malicious links and brand impersonation.

Read resource
The public investigation tool queries DNS and supported registry records. It does not follow redirects, fetch page content, scan downloads or issue a threat verdict.