How redirects are checked

The resolver follows HTTP redirects on public addresses. Private networks, localhost, and metadata hosts are refused before a connection is opened. Each hop is screened again.

The public page shows the final domain and the time of the check, not the internal host that performed it.