Where does this link go? Check a short link before you click

Where does this link go? Check a short link before you click

A short link in a text message, an email, or a QR code hides its real address. Pull the links out of the message, expand each one, and look at the final host before you open anything.

A short link hides the one thing you need to see

Shortened links, QR codes, and tracking links in marketing email all show one address and open another. That is harmless when the sender is who they say they are. It is also how phishing messages work: the text names your bank or a delivery company, and the link goes somewhere else.

Hovering over a link on a computer shows only the short address, and on a phone you often see nothing at all. Clicking to find out means your browser has already loaded the page.

Pull the links out, then expand them

If the link sits inside a long message, paste the text or the email's HTML into the URL Extractor. It lists every link it finds, trims trailing punctuation, and removes duplicates. Extraction runs in your browser and none of the links are opened or expanded, so it is safe to paste a suspicious email.

Then paste each short link into the URL Expander. Our server follows each HTTP redirect, up to 10 hops, and shows the final destination and its host, with every hop listed under it. The page at the end is never rendered and its scripts do not run. A redirect done with JavaScript or a meta refresh stops the chain at that page, and the server sees what a new visitor with no cookies would see.

Check where a link goes

  1. Copy the message text, or the link itself. Don't tap or click it.
  2. If there are several links, paste the text into the URL Extractor and copy the list.
  3. Paste a link into the URL Expander, tick the robot check, and press Expand.
  4. Read the host of the final destination. Check that it belongs to the company the message names and that it is spelled right.
  5. Look at the hops. A chain that passes through unrelated domains or ends on a look-alike domain is a reason to leave the link alone.

What expanding a link can't tell you

  • It shows where a link goes, not whether the page there is safe.
  • Only HTTP redirects are followed. A link that moves on with JavaScript stops early.
  • A shortener can answer our server differently from your phone, for example by country or device.
  • The URL Extractor skips relative links in pasted HTML and does not expand short links.

Frequently asked questions

How can I see where a short link goes without clicking it?

Paste it into the URL Expander. It follows the redirects on our server and shows the final address.

Is it safe to paste a suspicious email into the URL Extractor?

Yes. The extraction runs in your browser, and none of the links are opened.

Why does an expanded link end on a sign-in page?

Some sites send visitors without a session to a sign-in or consent page first. Our server has no cookies, so that is where it lands.

Can a QR code hide a link too?

Yes. A QR code holds a web address like any other link. Copy the address it contains and expand it before you open it.

Tools used in this guide

  • URL ExtractorInternet Tools

    Pulls every link out of text or HTML source.

  • URL ExpanderNetwork Tools

    See where a short link goes before you open it.

More from the blog

All guides