Redirect Checker & URL Expander

See every hop a link takes before you click it — HTTP, meta refresh and JavaScript redirects, short links included.

Follows 301, 302, 307, 308, meta refresh and JavaScript redirects. Paste several links to check them all at once.

What the checker follows

A link can send you on in four different ways, and a checker that only reads status codes misses two of them. Every step in the chain above is labelled with the one it used.

MechanismWhere it livesWhat to know
HTTP redirect (301, 302, 303, 307, 308)The server's response, in the Location headerThe proper way. Fast, and every crawler follows it.
Refresh headerA Refresh: 0; url=… response headerNot in the HTTP standard, but browsers honour it.
Meta refresh<meta http-equiv="refresh"> in the pageCommon on old sites and interstitials. The page has to load before it moves on.
JavaScriptlocation.href or location.replace() in a scriptUsed by link shorteners and ad trackers. Slowest, and not every crawler runs it.

301, 302, 307 or 308?

The number tells the browser — and more importantly search engines — how to treat the move.

CodeMeaningKeeps the request methodUse it for
301Moved permanentlyNot guaranteedA page or site that has moved for good
308Permanent redirectYesThe same, where a POST must stay a POST
302Found (temporary)Not guaranteedShort-lived moves, sign-in bounces, A/B tests
307Temporary redirectYesTemporary moves of form submissions and APIs
303See otherAlways becomes GETSending a browser to a result page after a form

The mistake that costs rankings is a 302 on a move that is actually permanent — typically the switch from http to https, or from www to the bare domain. Search engines treat 301 and 308 as the instruction to carry ranking across; the checker flags a temporary code on exactly those moves.

Why a phone or Googlebot can end up somewhere else

Many sites decide where to send you from the User-Agent header: phones to a mobile site or an app store, crawlers to a lighter page, desktops to the full site. That is usually harmless. It becomes a problem when search engines are shown a different destination from the one people get, which is exactly the kind of mismatch that is invisible from your own browser.

Tick Compare all four and the same link is traced as Chrome on a desktop, Safari on an iPhone, Googlebot and Bingbot at the same moment. Any identity that lands somewhere different from Chrome is highlighted.

One caveat worth knowing: large sites can confirm a real Googlebot by its network address. A site that does that will treat this check as an ordinary visitor, so a Googlebot trace shows what a site does on the user agent alone.

Short links: bit.ly, t.co, TinyURL and the rest

A short link is a redirect by design, and it tells you nothing about where it leads. Paste it here and the whole path is listed, including the hops a shortener adds after the first one — many go through an http hop, a tracking hop or a second shortener before the real page.

Links shared on X are wrapped in t.co whatever they originally were, so a t.co address hides even a plain, full-length URL. Pasting it here shows the original.

How to read the result

Every link gets one card. The top line is the address you entered; the arrow line under it is where the link really ends, with the page title when there is one.

  • Status is the first answer the server gave. A 3xx here means the link redirects; a 200 means it opened directly; 4xx and 5xx are errors.
  • Redirects counts the hops between the link and the final page. One is normal, two is common, three or more is a chain worth shortening.
  • Response is the total time for the whole chain, measured from our server.
  • View details on any step opens the IP address that answered, whether the hop used HTTPS and its certificate verified, the server software, the HTTP version and every response header the server sent.
  • Badges such as Cloudflare, nginx or WordPress name the platform the final page appears to run on, read from its headers.

To keep a record, Copy for Excel / Sheets puts the chain on the clipboard as a table: paste into a spreadsheet and every column lands in its own cell. Bulk runs also offer a CSV download.

Redirect chain problems and how to fix them

What the checker showsWhat it meansThe fix
Three or more redirectsA chain such as httphttpswww → new URL. Each hop adds a round trip and crawlers may stop following long chains.Point the old address straight at the final one, in one 301.
Redirect loopTwo rules send the address back and forth. Browsers show “too many redirects”.Usually an HTTPS or www rule fighting a CDN or plugin setting. Keep one of them.
302 on http → https or www changesA temporary code on a permanent move.Change the rule to 301 or 308.
HTTPS to HTTPA hop drops back to an unencrypted address.Update the target in the rule to the https address.
Ends on a 404The redirect points at a page that no longer exists.Redirect to the closest live page, or remove the rule.
Meta refresh or JavaScript hopThe page has to load before it moves on.Replace it with a server-side 301 where you control the site.

If you run WordPress, our guides on fixing “redirected you too many times” and redirecting www to non-www with .htaccess cover the two most common causes.

Every redirect tool on Sigma Wire

They all run the same checker; each page is set up for one job.

Tracking parameters and the clean link

Marketing links often arrive carrying utm_source, fbclid, gclid and similar tags that exist to record the click, not to load the page. When the destination has them, the checker lists them and offers a copy of the same address with only those tags removed — parameters the page may actually need are kept.

What the checker cannot see

  • Scripts are read, not run. A JavaScript redirect is found in the page source and followed when the page is a redirect screen. A destination built at run time, or reached only after a click or a countdown, will not appear.
  • Bot checks stop the trace. Sites behind a Cloudflare or similar challenge answer automated requests with the challenge page. The trace stops there and names the service, rather than reporting a status code that means nothing.
  • Location matters. Requests come from a server in the United States with no cookies and no sign-in, so links that route by country or by login can end differently for you.
  • Where, not whether. The checker shows where a link goes and a few signals worth a second look. It does not judge whether a site is malicious; for that, scan the final address with a malware scanner such as VirusTotal — the result has a button for it.

Privacy

The links you check are not stored. The requests are made by our server, which means a suspicious link is followed without the destination ever loading in your browser, running its scripts or seeing your address.

Questions

How do I see where a short link goes without clicking it?

Paste it into the checker. The request is made by our server, not your device, so the link is followed and every stop is listed without the page ever opening in your browser.

What is the difference between a 301, 302, 307 and 308 redirect?

301 and 308 say the move is permanent; 302 and 307 say it is temporary. Search engines pass ranking to the new address for the permanent pair. 307 and 308 also promise to repeat the same request method, which matters for form submissions and APIs, not for ordinary links.

Why is Googlebot or my phone sent somewhere different?

Some sites route visitors by device or by whether they look like a crawler, for example to a mobile site or an app store. Tick Compare all four and the checker traces the link as Chrome, iPhone, Googlebot and Bingbot together and marks any that end somewhere else.

Does it catch JavaScript and meta refresh redirects?

Yes. Meta refresh and the Refresh header are read directly. JavaScript redirects are found in the page source and followed when the page is a redirect screen. The script is not run, so a destination that is assembled at run time, or only reached after a click, will not be seen.

Why does it say the site uses a bot check?

Some sites answer automated requests with a Cloudflare or similar challenge instead of the page. A person in a browser passes it; a checker cannot, so the trace stops there and says so rather than reporting a misleading status code.

Is the link I check stored, and is it safe to paste a suspicious one?

Links are not stored. Because our server makes the requests, nothing from the destination runs in your browser. The checker shows where a link goes, not whether it is malicious; for a malware verdict, scan the final address with a service such as VirusTotal.

Why can the result differ from what I see in my browser?

Your browser may be signed in, carry cookies from earlier visits, or be in another country. The checker starts with no cookies from a server in the United States, so links that route by login, location or time can end differently.