What it expands

You give the tool one public URL, usually a shortened link from a social post, a QR code or an affiliate campaign. The server follows the redirect path and returns the final destination plus the details it collected along the way.

It is a diagnostic view, not a link shortener. It does not create a new short link, and it does not guarantee that the destination is safe. Treat the result as information to review before you click.

Final URL or first hop

The type selector chooses what the result emphasises. Final URL follows the chain to the last public address. First hop stops at the first redirect target, which is useful when you want to see the immediate destination without revealing the full path.

For a normal marketing link, the final URL is the page a visitor reaches. For a suspicious link, the first hop can show a tracking domain before the final landing page, and the chain shows every intermediate host.

The redirect chain

Each line in the chain records the URL, the HTTP status and the time for that step. A 301 is permanent, a 302 is temporary, and a 307 or 308 preserves the request method. The chain ends when a response is no longer a redirect.

The tool follows up to ten redirects and stops if the limit is reached. A long chain is not always malicious, but it wastes time and can hide the real destination. Look for loops, unexpected domains and shorteners nested inside other shorteners.

Metadata and headers

The result includes the page title and description when the destination provides them, plus the response headers returned by the final URL. Headers can show the server, content type, caching policy and redirect-related fields.

Metadata is what the page declares; it is not a safety verdict. A page can have a harmless title and still host unwanted content. Read the final domain and the chain before trusting the destination.

Screenshot

When the capture succeeds, the tool attaches a 1280 by 720 JPEG preview of the final page. The screenshot is generated by a separate browser request, so it can differ from what you see if the page personalises content or shows a consent banner.

A blank or blocked screenshot often means the page requires JavaScript, blocks headless browsers or refused the capture. It does not prove the page is empty.

Safety and public URLs

The service only accepts public HTTP and HTTPS addresses. It rejects localhost, private IP ranges and other internal targets, and it re-checks redirects so a public link cannot bounce into a private network.

That protects the server, not your browser. If the final URL looks unfamiliar, open it in an isolated browser or use a reputation service before entering credentials or downloading a file.

Timeouts and limits

Each redirect step has a short timeout and the final fetch has a longer one. A slow or unreachable host can produce a partial chain or an error instead of a final page. The tool does not accept custom headers, cookies or authentication, so a login-protected destination will show a sign-in page or a redirect.

Only one URL is processed per run. Very large pages may be truncated for metadata extraction, and the screenshot has a fixed viewport rather than the full page height.

Use cases

Check where a campaign link really goes before you publish it. Trace an affiliate or referral link to see which domains are involved. Inspect an old redirect after a site migration. Review a link from an unexpected message before you click it in a normal browser.

For SEO work, the chain shows whether a redirect is permanent or temporary and whether it lands on the intended page rather than the homepage. For security work, it exposes nested shorteners and unexpected hosts.

Privacy

The URL is sent to the server, which fetches the destination and captures a screenshot. The tool does not require an account, but the destination sees a request from the service rather than from your browser. Do not submit private URLs, signed download links or addresses that contain tokens.

Reading a suspicious link

Look at the final domain, not the text of the message. A long subdomain can put a familiar brand name far from the actual host. Check for lookalike characters, unexpected country domains and nested shorteners that hide the last hop. HTTPS means the connection is encrypted, not that the destination is honest.

If the final page asks for a password, a payment card or a file download, open it in an isolated browser or skip it. This tool reports where the link goes; it does not scan the destination for phishing, malware or unwanted software.

How the analysis is collected

The redirect trace uses lightweight requests that read the response headers without downloading the full body. The final URL is then fetched to collect the HTML, title, description and headers. The screenshot is produced separately by a browser engine at a fixed viewport.

Because the metadata comes from the raw HTML and the screenshot comes from a rendered page, the two can disagree. A consent banner or a client-side redirect may appear in the screenshot but not in the title. Read both with that difference in mind.

Common redirect patterns

A marketing link often goes from a shortener to a tracking domain, then to the campaign page. A site migration may chain the old URL to the new one and then to a language or region variant. A plain http address may redirect once to https and once to the www host.

Affiliate links sometimes hide the merchant behind a cloaking domain, and expired domains can redirect to an unrelated offer. None of these patterns is automatically malicious, but each one changes who sees the request and which domain receives the credit.

Re-check the chain after a campaign ends; an expired short link can point somewhere unexpected. Keep the final URL with your campaign notes.

Record the date of the check; that makes the result reproducible.

Frequently Asked Questions