What does a URL expander do?

It resolves a shortened link and shows you the address it points to, without opening the destination page. This lets you judge a link before clicking it.

Does expanding a link open it?

No. Zurl's server follows the redirects one hop at a time; your browser never visits the link. Only response headers are used — page content is discarded unread, no scripts run and nothing is downloaded to your device.

Which shorteners does this work with?

Any service that uses standard HTTP redirects, which is effectively all of them. It also resolves Zurl links directly from our own records, which is why it can tell you when a Zurl link is expired or disabled rather than just failing.

What is a redirect chain?

Some links pass through several redirects before reaching the final page — a shortener pointing at another shortener, or a tracking redirect in the middle. The expander shows every hop, so you can see whether a link is taking an unusual route.

Does this tell me whether a link is safe?

No, and this matters. It tells you where the link goes, not whether the destination is trustworthy. Once you have the destination, the URL Safety Checker looks it up in Google Safe Browsing and VirusTotal. Seeing a familiar-looking domain is not proof of safety, particularly if it uses unusual characters or many subdomains.

Why did expanding fail?

Some sites block automated requests, some are simply offline, and some short links have expired or been removed. Zurl also refuses to follow a chain that points at a private network address — every hop is checked, including the IP address the domain resolves to — since that would let the tool be used to probe internal systems.

URL ManagementFree · no sign-up

URL Expander

Paste a shortened link to see where it actually leads. Zurl follows the redirect chain and shows you the destination without opening the page.

Zurl’s server makes the request for you. URLs are not logged; results are cached briefly.

How to use the URL Expander

Step 1: Paste the short link, for example a bit.ly or t.co URL.
Step 2: Select Expand.
Step 3: Read the final destination and every redirect hop before deciding to visit.

Why short links need expanding

A short link deliberately hides its destination. That is useful — it is what makes the link short — but it also means you are asked to click something with no information about where it goes. Attackers rely on exactly this, which is why shortened links appear so often in phishing messages.

Expanding the link first restores the information a normal URL would have given you.

How to read the result

Check the domain, carefully. The destination host is the single most important piece of information. Read it character by character — paypa1.com and paypal.com differ by one glyph, and that is a deliberate technique.

Look at the chain length. One or two hops is normal. A link passing through five different domains is worth treating with suspicion.

Notice unexpected shorteners in the chain. A short link pointing at another short link is a common way of evading review.

What this tool cannot tell you

It resolves addresses. It does not evaluate reputation. A link can resolve to a perfectly ordinary-looking domain and still be hostile — run the destination through the URL safety checker for a threat-database lookup.

Context remains the strongest signal. An unexpected link in an unexpected message is suspicious regardless of where it resolves, and no expander changes that.

Inspecting the destination further

Once you have the full URL, the URL parser breaks it into its protocol, host, path and query parameters, and flags patterns like embedded credentials, punycode domains and unusual subdomain depth. The redirect checker shows the same chain with status codes and redirect types, which is what you want when debugging your own redirects.

If a Zurl link is being used for something harmful, please report it — reports are reviewed and links can be disabled.

Frequently asked questions

What does a URL expander do?: It resolves a shortened link and shows you the address it points to, without opening the destination page. This lets you judge a link before clicking it.
Does expanding a link open it?: No. Zurl's server follows the redirects one hop at a time; your browser never visits the link. Only response headers are used — page content is discarded unread, no scripts run and nothing is downloaded to your device.
Which shorteners does this work with?: Any service that uses standard HTTP redirects, which is effectively all of them. It also resolves Zurl links directly from our own records, which is why it can tell you when a Zurl link is expired or disabled rather than just failing.
What is a redirect chain?: Some links pass through several redirects before reaching the final page — a shortener pointing at another shortener, or a tracking redirect in the middle. The expander shows every hop, so you can see whether a link is taking an unusual route.
Does this tell me whether a link is safe?: No, and this matters. It tells you where the link goes, not whether the destination is trustworthy. Once you have the destination, the URL Safety Checker looks it up in Google Safe Browsing and VirusTotal. Seeing a familiar-looking domain is not proof of safety, particularly if it uses unusual characters or many subdomains.
Why did expanding fail?: Some sites block automated requests, some are simply offline, and some short links have expired or been removed. Zurl also refuses to follow a chain that points at a private network address — every hop is checked, including the IP address the domain resolves to — since that would let the tool be used to probe internal systems.