Destination safety checking

You wonder what stops someone from creating a code that redirects to a phishing site, or what happens if your own destination gets flagged by mistake.

The answer

Every dynamic destination is checked automatically at creation, then re-evaluated regularly. A code gets the status safe, suspicious, or blocked depending on the result, and you get an email as soon as one of your codes switches to suspicious or blocked.

Step by step

Create or edit a code: the check runs automatically in the background.
Check the safety status shown on the code's page.
If an email warns you about a flag, open the affected code's page.
Contact support from the Contact page if you think an alert is wrong.

The possible statuses

A code marked safe showed nothing abnormal. Suspicious flags unusual signs (a raw IP address instead of a domain name, stacked subdomains, an unusually long address, password-related words in the address, a link shortener...): the redirect keeps working, but a warning shows to the person scanning before they reach the destination. Blocked flags a confirmed security issue: the redirect is fully suspended, the page only shows a warning message, with no link to the destination at all.

Reporting a code

Every destination page shows a "Report this code" link, reachable without an account, for anyone who finds a suspicious destination. The report goes to the moderation team, who can then block the code manually pending review.

Frequently asked questions

Can I unblock a code myself if it's flagged suspicious and I'm sure it's legitimate?

Contact support from the Contact page to have your destination reviewed: a code under doubt isn't reopened automatically just by ignoring the alert.

Does the check slow down creating a code?

No, the check runs in the background without blocking creation. A code you just created may show a being-checked status for a few moments.