domain-investigation.net

2. Uniform Resource Identifier

Form

URI

Scheme: http:// https:// ftp:// ftps:// mailto:

Address:

Result

Explanatory notes

A URL (HTTP, FTP or email) is usually what a domain investigation starts with.
These URLs are sub-types of URIs.

If email addresses "hide" in longish text passages, you can find them by using what is called a regular expression, for example. (Click for more details.)

In the case of a domain, the authority part of the URI does not contain an IP address, but a name.

The next step is to extract the TLD from the URI.

To this end, moving from left to right, search for the first occurrence of the single "/" (slash). This slash indicates the beginning of the path part that follows the authority part.

The authority part can optionally contain a port specification (0 to 65535) behind the TLD. If this is the case, discard that port number including the ":" (colon) to its left side.

Now, looking from right to left, search for a "." (dot) and write down the part to its right side (e.g. "com").
If this information is insufficient, you are probably dealing with a public suffix.
If this is the case, also write down the part to the left of the dot (e.g. "co.uk").

In the following examples, the TLDs and Public Suffixes in the URIs are highlighted in red and bold:

• ftp://ftp.is.co.uk/rfc/rfc1808.txt
• ftps://max:muster@ftp.example.de/archiv.zip
• http://example.com/absolute/URI/with/absolute/path/to/resource.txt
• https://www.example.org:8080/script.php?action=submit&pageid=2#section_3
• mailto:John.Doe@example.net
• mailto:torben@server.dk?cc=chief@company.no&subject=My%20order

If you have difficulties identifying the TLD or Public Suffix in any URI, choose the Pattern in the form at the beginning of this page, enter the remainder of the URL in the "Address" field and click "Extract".

You can use the Free Online Url Parser as an alternative service to parse URLs.

next