Website review
This review may include AI-generated content and is not individually verified. Domain, certificate and other facts come from the observed data on this page.
What is TrueURL?
TrueURL is a free online tool for checking where a URL actually leads. You paste in a link, and it follows the full redirect chain, showing each hop along with its HTTP status code and response time. Its main draw is unshortening or expanding links: revealing the final destination of a shortened or redirected URL before you click it.
What it does in practice
- Traces redirect chains: shows every intermediate URL, not just the final landing page, with status codes such as 301 (permanent) and 302 (temporary).
- Unshortens links: expands shortened URLs so you can see the real destination.
- Reports timing: response times per step help spot slow redirects that hurt user experience.
- Handles one URL at a time: bulk checking isn't supported, so large link audits mean repeating the process.
Who gets the most from it
- SEO and site owners verifying that old URLs redirect properly, especially permanent HTTP-to-HTTPS moves where a 301 preserves ranking signals.
- Everyday users checking a shortened link from an unsolicited message before clicking, since shorteners can mask phishing or malware pages.
- Marketers and affiliates confirming that tracking or affiliate links land where expected.
Trade-offs
TrueURL's value is diagnostic, not protective: it shows you the destination but doesn't judge whether it's malicious. A final URL on a trusted domain with HTTPS and no odd subpaths is a reasonable sign of safety, but treat that as a judgment call, not a guarantee. The page states that checked URLs aren't stored, which matters if you're testing internal or private links. For broader link hygiene, pair it with a reputation checker such as Google Transparency Report or VirusTotal.
Next step: before clicking a link from an unknown sender, run it through TrueURL and read the last hop in the chain—not the first—since that's where you'll actually land.
How can I check whether a shortened link is safe before I click it?
Expand the short link without clicking it, inspect the final destination and every hop in between, then judge the result against the sender and context. A link expander like TrueURL shows the full redirect chain with HTTP status codes and per-step response times, which is what you need to see where a bit.ly or t.co link actually lands.
A practical check, in order
- Never click first. Paste the shortened URL into an expander and read the chain from start to finish.
- Look at the final domain, not the short one. The last hop is where you would actually end up. Compare it with the organization that supposedly sent the message.
- Count and scan the intermediate hops. A short link that bounces through several unrelated domains or ad-tracking redirectors is a warning sign, even if the final page looks ordinary.
- Check the scheme. A final destination on plain HTTP, or a jump from HTTPS to HTTP, is a reason to stop.
- Read the status codes. 301 and 302 are ordinary forwarding; a chain that ends in an error or loops is broken or deliberately evasive.
- Judge the context. An unexpected short link in an unsolicited email, text or social message deserves more suspicion than one you requested yourself, for example a password-reset link you triggered.
Where this fits and where it stops
Expanding a link tells you where it goes; it does not tell you whether the destination page is malicious. A clean-looking domain can still host a phishing form, and a legitimate domain can host a compromised page. Treat the expansion as the first filter, then check the destination site's reputation and whether the page asks for credentials or payment it has no reason to request.
TrueURL checks one URL at a time, so if you receive a batch of short links, expect to work through them individually. For a quick second opinion on the final domain, a reputation service such as VirusTotal can scan the resolved URL, and urlscan.io shows what a page loads without you visiting it. When a link claims to come from a bank, retailer or delivery company, verify through that organization's own app or a domain you typed yourself rather than any link in the message.
Decision rule: if the final domain is unfamiliar, the chain passes through unrelated redirectors, or the message created urgency, do not open it. Reach the service through a channel you already trust instead.
What does the full redirect chain with status codes and response times tell me about a site's SEO or server performance?
A full redirect chain with status codes and response times tells you two separate things: whether link equity and users are being routed efficiently (SEO), and how much latency each hop adds before the final page loads (server performance). One chain check can reveal both, but they need to be read differently.
Reading the chain for SEO
- 301 vs. 302: A permanent 301 passes ranking signals to the destination; a 302 signals a temporary move and is generally not meant to consolidate ranking power. A chain of 302s, or a 301 that lands on a 302, is a sign the redirect setup was patched together rather than planned.
- Chain length: Each hop is a step search engines and browsers must follow. A single hop (old URL → new URL) is clean. Three or more hops, especially across domains, dilute link equity and are a common cause of pages ranking for stale URLs.
- Final destination: The chain should end on the canonical, HTTPS version of the intended page. If it terminates on a homepage, a 404, or a different domain than expected, the redirect is misconfigured.
- HTTP → HTTPS: A chain that starts on
http://and ends onhttps://in one hop is correct; one that bounces through several intermediate URLs suggests legacy rules that were never cleaned up.
Reading the chain for server performance
Response time per hop shows where latency accumulates. A single slow hop points to a specific server or rule (for example, a redirect handled by an application rather than at the edge). Several moderately slow hops add up: a four-hop chain at 300 ms each costs roughly 1.2 seconds before the page even begins to load, which users feel on mobile connections.
A quick comparison
| Pattern | SEO signal | Performance signal |
|---|---|---|
| One 301, fast, to canonical HTTPS URL | Healthy | Healthy |
| 301 → 302 → 200 | Consolidation incomplete | Usually fine, but fragile |
| 3+ hops, mixed domains | Equity diluted, likely misconfigured | Compounding delay |
| 302 to a temporary promo page | Intentional, but not for permanent moves | Depends on hop count |
Practical next step
Take a URL you know was recently moved, run it through TrueURL, and note the number of hops and the slowest step. If the chain exceeds two hops or ends somewhere unexpected, fix the rule at the source so the first redirect points directly at the final URL. For a broader crawl-level view of redirects across many pages, pair this with a site audit tool such as Screaming Frog; for checking whether a shortened link hides a risky destination before you click it, the unshortener view on the same page is the relevant feature.
When should I expect a 301 versus a 302 redirect, and why does that difference matter for my rankings?
Expect a 301 when a URL has moved for good and the old address should no longer be the canonical one; expect a 302 (or 307) when the move is temporary and the original URL should keep its standing. The distinction matters for rankings because a 301 tells search engines to consolidate signals—links, authority, and indexing—on the new URL, while a 302 says "come back to the original later," so search engines generally keep treating the original as canonical.
Choosing between them
| Situation | Appropriate code | Why |
|---|---|---|
| Permanent domain change, URL restructuring, HTTP→HTTPS migration | 301 | Signals a lasting move; ranking signals transfer to the destination |
| Seasonal page, A/B test, maintenance window, geo/language routing | 302 (or 307 for method-preserving redirects) | Original URL remains the canonical target |
| Short-lived campaign landing page | 302 | You intend to restore or retire the original |
| Retired content with a close topical replacement | 301 | Consolidates authority instead of losing it |
Two practical caveats. First, a 301 is a strong hint, not a guarantee: search engines can override it if the destination is irrelevant or the chain is messy. Second, long or looping chains dilute the benefit—each hop is a place where signals and crawl budget can leak, and a 301 that lands on a 302 that lands elsewhere is effectively a temporary move in the eyes of a crawler.
A concrete check
Suppose you've migrated a blog from oldsite.com to newsite.com and traffic hasn't recovered. Trace one affected article URL and look at the full chain: if you see oldsite.com/post → 302 → newsite.com/post, that's your answer—the redirect is telling search engines the move is provisional. Fix it to a single 301 hop and recheck. A redirect-chain tool such as TrueURL is suited to this: it follows each hop and reports status codes and response times, so you can spot stray 302s, multi-hop chains, and slow hops in one pass. It analyzes one URL at a time, so for a migration you'd sample your highest-value pages rather than the whole site.
For bulk auditing across many URLs, a crawler-oriented tool is a better fit; Screaming Frog is the common choice for site-wide redirect mapping.
Does TrueURL keep a record of the URLs I check, and how is my privacy handled?
TrueURL states that it does not store or save the URLs you check. According to its FAQ, checks are performed in real time and no history of your searches is kept. That means the tool isn't designed to build a log of the links you've submitted.
What this covers, and what it doesn't
- No stored history: TrueURL says it doesn't keep a record of checked URLs, so returning to the site won't show your past checks.
- Real-time processing: Each check runs when you submit a URL, rather than being looked up from a saved database.
- Not a full privacy guarantee: "We don't store URLs" addresses retention by TrueURL itself. It doesn't describe encryption, third-party infrastructure, or network-level logging, so treat it as a statement about the site's own data practice rather than a complete privacy policy.
Practical guidance
If you're checking a link that contains sensitive information—such as a private share link, a token in a query string, or an internal URL—the safest habit is to avoid submitting the full link to any online tool. You can test a shortened link's destination with the public part of the URL, or verify it through the destination site directly.
A useful next step
Before pasting a link, ask two questions: does the URL itself reveal anything private (tokens, email addresses, account IDs), and does the site publish a privacy policy covering more than "we don't store URLs"? If either answer concerns you, check the link from a controlled environment or ask the sender for the destination instead. For a second opinion on where a shortened link leads, you can compare results with another redirect checker such as WhereGoes.
Can I analyze more than one URL at a time, or do I need to check each link individually?
You need to check each link individually. TrueURL analyzes one URL at a time, and its FAQ states that bulk checks aren't supported—you'd have to run each URL separately.
What this means in practice
- Small batches: For a handful of links (say, a few shortened links from one email), checking them one at a time is quick and fine.
- Larger lists: If you're auditing dozens or hundreds of links—say, after a site migration or when reviewing affiliate links—the one-at-a-time approach becomes slow. In that case, a bulk redirect checker or a script that follows redirects (e.g., using command-line tools) is a better fit, and you can reserve TrueURL for spot-checking the results that look suspicious.
A useful next step
Before clicking a shortened link from an unfamiliar sender, paste it into TrueURL first and look at the final destination: confirm it uses HTTPS and matches the brand or site you expect. If you have many links to verify, sort them by risk—unsolicited messages first—and check those individually rather than trying to process everything at once.
User reviews (0)