Field note / Redirects & privacy
Before you share a link,
read what it carries.
A password-reset or sign-in link can act like a temporary credential. Its destination is not the only sensitive part.
Parameters are not just decoration
In a synthetic address such as https://account.example/reset?token=demo-only, the value after token= may authorize an action. Other links can contain email addresses, customer identifiers or private file access. Secrets can also appear in paths and fragments.
Scanning can mean sharing
VirusTotal describes shared scanning reports and data sharing with examining partners. urlscan distinguishes public, unlisted and private scans; unlisted scans remain visible to vetted researchers and security companies in its Pro platform. Read a service's current policy before submitting a personal link.
LinkLens does not submit anything to either service. Its local notes omit all user-provided strings so you can share generic structural observations without including the original address.
A nested address is a clue, not a route map
In https://mail.example/click?url=https%3A%2F%2Fshop.example, the query contains an encoded address. LinkLens can identify shop.example as a possible embedded destination. It cannot confirm that the server will use it.
Servers may redirect using information not present in the URL. Scripts can navigate after a page loads. Short links often provide no destination in the text at all. No URL parser can reconstruct those behaviors from the pasted address alone.
Use a known route for private actions
If a sign-in or delivery message is unexpected, check your account through your usual app or bookmark. If you need professional help, ask how to share the message privately before posting it publicly.