A chained URL is a sequence of linked web addresses that leads a browser or automated agent from one page or endpoint to the next. Instead of a single destination, the system follows a path of redirects, click-throughs, or generated links to reach content, collect data, or trigger actions. In security work, this matters because each step can hide intent, expand reach, and make automated activity look like normal browsing.
Attackers use chained URLs to guide crawlers, bots, or AI agents through many pages while reconstructing payloads, harvesting content, or probing for weaknesses. Defenders watch for unusual navigation depth, repeated redirect patterns, and bursts of linked requests that do not match human behavior. Strong filtering, link validation, and tool-use limits help prevent an agent from turning browsing into an abuse pipeline.