Softonic

Link Shortener Decoder

Step 1 / 2 Results
Decode

Short links hide their destination, which is exactly what phishing and affiliate-cloaking campaigns rely on. This decoder follows every HTTP 30x response in the chain, records each hop with its status code, and shows the final URL so you can decide whether to visit it. It works on bit.ly, t.co, tinyurl, is.gd, buff.ly, lnkd.in and any custom short-domain redirector.

How to decode a short URL

  1. 1

    Paste the short link

    Copy the URL from the message, email or social post and paste it into the input. http:// is added if you forget it.

  2. 2

    Trigger the resolve

    The decoder issues a HEAD/GET request without following redirects and captures the Location header on every 301/302/307/308.

  3. 3

    Read the hop list

    Each row shows the URL it hit and the status code returned. A clean shortener gives you 2–3 hops; a chain of 6+ is suspicious.

  4. 4

    Inspect the final URL

    Look at the domain, path and tracking parameters before you click. If the final URL looks unfamiliar, do not open it.

What the hop list tells you

A URL shortener is a redirect, not a file host. When you request a short URL, the server answers with a redirect status and the real destination in the Location header. Chains happen when that destination is itself another short link, or when the final site bounces through tracking domains.

Redirect status codes you will see

Code Meaning What it implies
301 Moved permanently Canonical redirect. Safe; the shortener has always pointed here.
302 Found / temporary Very common for URL shorteners.
307 Temporary, method-safe Rare in shorteners; common in auth flows.
308 Permanent, method-safe Used by modern shorteners that respect the HTTP method.
200 OK, reached target End of the chain.
404 Not found Short link is dead or was revoked.

Red flags in a chain

  • More than 5 hops. Legitimate shorteners rarely chain more than 2–3 times. Long chains usually mean affiliate cloaking or tracking obfuscation.
  • Hops through punycode domains. Host names like xn--pple-43d.com render as аpple.com in some browsers and are a classic homograph trick.
  • Mixed schemes. If the chain drops from https to http partway through, the session is no longer protected.
  • Final URL on a lookalike domain. linked1n.com, faceb00k.org, paypa1-login.com.

Privacy note

Decoding a short link issues one request per hop from our server, not from your IP. That keeps analytics on the shortener side from tying the click back to you, which is useful when you are investigating a suspicious message.

Frequently Asked Questions

Any HTTP-based shortener. That includes bit.ly, t.co, tinyurl.com, is.gd, goo.gl archives, lnkd.in, buff.ly, ow.ly, tiny.cc, rebrand.ly and custom branded domains. If the service uses standard 30x redirects it will resolve.

No. If the final destination sits behind authentication, the decoder stops at the login page because it has no session cookies for the target site.

The decoder caps the chain at 15 hops to avoid redirect loops. If you hit the cap, the final URL in the list is probably part of a loop or a deliberately obfuscated chain.

It helps you see where a link goes before you click, which is a big part of the battle. It does not scan the destination for malicious content, pair it with a reputation service if the final domain looks unfamiliar.

The URL is only used to issue redirect lookups for this session. It is not persisted to disk or shared with any third party.

Related Tools

Meta Description Length Checker

Measure a meta description in characters and estimated pixels, compare editorial ranges, and inspect illustrative desktop and mobile previews.

Canonical Tag Generator

Generate a valid rel=canonical link tag for any URL. Includes URL validation and the common mistakes to avoid.

Google SERP Simulator

Preview an approximate Google-style search snippet with character limits for mobile and desktop. Your draft stays in this browser session.

HTTP Security Headers Checker

Paste HTTP response headers and review HSTS, CSP, clickjacking, MIME, referrer and cross-origin policies locally in your browser.

XML Sitemap Validator

Check sitemap XML in your browser for parse errors, missing locations, duplicate URLs, and common sitemap field values.

External Links Extractor

Paste raw HTML, optionally set a base URL, and get a clean de-duplicated list of every external http/https link the code contains for link audits and SEO reviews.

Tool available in other languages