Paste any URL. Fern follows the whole redirect chain on its own server and shows every hop — shorteners, cross-domain jumps, plaintext downgrades, meta-refreshes — and exactly where it finally lands.
Private and loopback addresses are detected but never fetched. Nothing you trace is stored.
A short link is a black box. Fern opens it on our box, not yours — and shows you the path.
See the real destination domain before anyone clicks. Crooks hide behind shorteners and innocent-looking redirects.
Every hop that changes domain is flagged — the classic open-redirect and tracking-pixel pattern.
Any hop that falls back to plain http gets called out. Credentials don't belong on the wire.
Not all redirects live in status codes. Fern reads the final page for refresh and window.location jumps.
The tracer runs server-side with loopback and private ranges firewalled — your browser never touches the target.
Millisecond timings expose redirector farms and geo-hops you'd never notice in a browser.