Tools · free, no sign-up
Link scanner test
Company mail filters open the links in an email before the person does. That uses up one-time sign-in links and "confirms" addresses nobody confirmed. Email yourself a test link and see exactly what opens it, and when.
No email is sent from here. You send the link yourself, to the mailbox you want to test.
- Email the link to the address you want to test: your work mailbox, a customer's domain you have an inbox on, a shared support address. Any sender works. Don't open the link yourself first.
- Wait for it to arrive, then open the email and click the link like anyone would.
- Press the button on the page it opens. That press is how the test knows which visit was a person.
Send it with email59 instead (one call, if you have a key)
Put your own address in to. It counts as one email. No key yet? Get one.
What opened it
Waiting for the first request…
| When | Request | Who | Network | Browser string |
|---|
Reading the result
| You see | It means |
|---|---|
| Automated before your click | Something fetched the link ahead of you. A sign-in link that works once would already be spent, and a "click to confirm" link would already be confirmed. |
| Automated at or after your click | The mailbox rewrites links and checks them at the moment of the click. One-time links can still lose that race. |
A HEAD request | A checker asking whether the page exists without loading it. Harmless if your links only act on POST. |
| Only You and Your browser | Nothing else touched it on this mailbox, this time. Other mailboxes will differ; test the ones your customers use. |
| Not sure yet | A page load with no button press so far. It turns into one of the above once you press the button. |
If something does open your links
- Make the link open a page with a button, and do the real thing on the button's
POST. This test page works that way, which is why scanners don't show up as people. - Or send a code to type instead of a link. There's nothing for a scanner to open.
- Don't try to block scanners by their network or browser string. They change, and you'll lock out real people behind the same company network.
The full story, with who scans and why: Your magic link was clicked before your user saw it.
What this page keeps
For each request to your test link: the time, the method, the IP address, the name of the network that owns it and the browser string. Only someone with this browser's saved key can read them. Test links stop working and their records are deleted after 7 days. The same thing as an API: POST /v1/linktest, then GET /v1/linktest/{id} with the X-View-Key header.
Sign-in emails that arrive and work
email59 is an email router with a small API for sign-in codes, links and notices. No domain setup, no subscriptions.