Checks

Cross-domain redirects detected

A hop's host is not the host of the final URL.

Why it matters

Leaving the site can be normal, such as a CDN or a canonical host. It can also send users somewhere you did not intend.

What to do

Confirm each external hop is expected.

Reference

Redirect chains should preserve HTTPS and avoid open-redirect patterns.

OWASP Unvalidated Redirects and Forwards Cheat Sheet