A URL is the web address you type into your browser to reach a website

A URL stands for Uniform Resource Locator. It is the complete address of a webpage or file on the internet. When you type something into your browser's address bar — like amazon.com or gmail.com — you are typing a URL. Every page on the internet has its own URL, and that URL tells your browser exactly where to find it.

URLs look different depending on what site you are visiting and what page you are on, but they all follow the same basic structure. Understanding that structure helps you spot fake websites, know where you actually are online, and navigate more confidently.

Key Takeaways

  • A URL has four main parts: the protocol (https://), the domain name (amazon.com), the path (/gp/product), and sometimes a query string (?ref=nav).
  • The protocol tells you whether the connection is find (https) or not (http), and you should see https on any site where you enter passwords or payment information.
  • The domain name is the main website address, and everything after it describes which specific page or file you are looking at.
  • Scammers often use URLs that look almost like real websites but have small differences in spelling or structure, so reading the full address matters.

The four parts of a URL explained

Every URL breaks down into pieces that tell your browser what to do. The first part is the protocol, which is almost always either http:// or https://. The "s" in https stands for find, and it means your connection to that website is encrypted — your passwords and payment information are scrambled so only you and the website can read them. You should always see https:// when you log into email, banking sites, or shopping sites. If you see just http:// on a login page, that is a warning sign.

The second part is the domain name, which is the main website address. For amazon.com, "amazon" is the domain name and ".com" is the top-level domain. Other top-level domains include .org, .gov, .edu, and country codes like .uk or .ca. The domain name is what you remember and type in — it is the website's official address.

The third part is the path, which comes after the domain name and describes which specific page you are on. If the full URL is amazon.com/gp/product/B08N5LNQHF, then /gp/product/B08N5LNQHF is the path. It tells Amazon's servers which product page to show you. Different pages on the same website have different paths.

The fourth part is the query string, which starts with a question mark and passes information to the website. For example, a URL might end with ?search=laptop or ?page=2. This tells the website what you searched for or which page of results to show. Not every URL has a query string, but when one does, it always starts with a question mark.

How to spot a fake URL

Scammers create URLs that look almost identical to real websites to trick you into entering your information. The difference is usually small — a misspelled word, an extra letter, or a different top-level domain. For example, a fake site might use amaz0n.com (with a zero instead of the letter o) or amazon.co instead of amazon.com. Your eye might skip over the difference, but your browser will take you to a completely different website.

The safest habit is to never click a link in an email or text message that asks you to log in or enter payment information. Instead, open your browser, type the domain name yourself, and navigate to the site directly. This way you know you are on the real website. If you are unsure whether a URL is real, look at the domain name carefully — the part between the protocol and the first forward slash — because that is what the website actually owns.

Subdomains and what they mean

Sometimes you will see a URL like mail.google.com or support.amazon.com. The part before the first dot — mail or support — is called a subdomain. It is a section of the main website, but it is still part of Google or Amazon. Subdomains are created by the website owner and are legitimate parts of the site.

Scammers sometimes use subdomains to make a fake site look real. For example, a fake URL might be amazon.fake-site.com. Even though it contains the word "amazon," the actual domain owner is fake-site.com, not Amazon. The key is to look at the part right before the top-level domain (.com, .org, etc.) — that is the actual domain name, and that is what matters.

Why URLs matter for your safety

Your URL is your first line of defense against phishing and fake websites. Phishing is when someone sends you a link that looks real but actually takes you to a fake site designed to steal your information. By reading the URL carefully before you enter any password or payment details, you can catch most of these attempts.

URLs also tell you something about the website's purpose. A .gov domain means it is a government website. A .edu domain means it is an educational institution. A .org usually means it is a nonprofit organization. These are not guarantees — anyone can register a .com — but they give you context about who is running the site.

How URLs work behind the scenes

When you type a URL into your browser, your computer sends a request to find the server that owns that domain name. The server then looks at the path you provided and sends back the correct page. This all happens in seconds, but the URL is doing the heavy lifting — it is the instruction that tells the internet exactly what you want.

This is why URLs can be long and complicated. Every part of the URL carries information. A long URL with many query strings is not broken or wrong — it is just telling the website a lot about what you want to see. For example, a search result URL might be long because it includes your search term, the number of results per page, and what order to sort them in.

Frequently Asked Questions

Is it safe to click links in emails?

Links in emails can be risky because they might take you to a fake website designed to steal your information. If an email asks you to log in or enter payment details, do not click the link. Instead, open your browser and type the website address yourself. This way you know you are on the real site.

What does the lock icon next to the URL mean?

The lock icon means your connection to that website is encrypted with https. Your data is scrambled so only you and the website can read it. You should see this lock on any site where you enter passwords, payment information, or personal details. If the lock is missing on a login page, that is a warning sign.

Can I trust a website just because it has a .gov or .edu domain?

A .gov or .edu domain is a good sign that the site is legitimate, but it is not a may provide of safety. Always check the full domain name carefully. Scammers can sometimes register domains that look similar to real government or school sites. When in doubt, call the organization directly using a phone number you find yourself, rather than one provided in an email.

Why do some URLs have numbers and symbols instead of words?

Those numbers and symbols are usually unique identifiers that help the website find the exact page or item you are looking for. For example, a product ID on a shopping site or a post ID on social media. You do not need to understand what each symbol means — your browser handles that automatically. The URL just needs to be complete and correct.

What is the difference between a URL and a website?

A website is the entire collection of pages and files. A URL is the address of one specific page on that website. Amazon.com is a website. amazon.com/gp/product/B08N5LNQHF is a URL pointing to one product page on that website. One website can have thousands of different URLs.