Your files stay on your device

# Redirect chain security analyzer

Follow a URL hop by hop and see HTTPS downgrades, cross-domain jumps, credential-bearing links and chains that run too long.

One request per hop
The walk sends a GET to the URL, reads its status and headers, and if it answers 3xx with a Location, repeats on the next URL. Each hop is a separate proxied request, so the chain appears exactly as a server-side client sees it.

Findings say what the chain does, not what the site intends: a cross-domain jump is normal for trackers and shorteners, and a redirect that keeps cookies is often routine. The tool sends one GET per hop through the proxy, so results reflect what the proxy's network position sees; cookies, logins, and geolocation are not replayed. Chains longer than 5 hops are flagged because each extra hop costs a full request, not because a specific length is wrong.
OptionsFollow the chain

## More web & auth tools

- [HTTP timing probe](/network/http-timing)
- [HTTP status reference](/web/http-status)
[All web & auth tools](/web)

Was this tool useful?
YesNo

---

Canonical HTML: https://nutter.tools/web/redirect-chain-security-analyzer
Markdown version: https://nutter.tools/web/redirect-chain-security-analyzer.md
Plain-text version: https://nutter.tools/web/redirect-chain-security-analyzer.txt
Agent index: https://nutter.tools/llms.txt