Report a link

• The full short URL (for example https://…/abc123).
• The reason: phishing, malware, spam, illegal or other.
• Details (up to 2,000 characters) and, only if you want us to be able to reply, an email.

The form address also accepts a POST with JSON or form data.

• Automatic: if 5 distinct people (by IP fingerprint) report the same link as phishing or malware within 24 hours, the link goes “under review”: it stops redirecting and shows a review page. The threshold is configurable; other reasons wait for a person.
• A person: moderation can suspend the link (it answers 410 and its owner cannot reactivate it) or the whole account, or dismiss the report. The owner can appeal a held link.
• Warning: if a destination is flagged unsafe by the safety check, a warning page is shown with no continue button.

We do not publish a response time or an SLA today, because there is none we can meet: report moderation is done with administrative commands (there is no moderation screen yet), there is no individual acknowledgement to the reporter, and the form answers the same for a new report as for a repeated one. The only measurable time is the automatic one described above. A timeline will be published here once there is a process with an owner and capacity, and it is one of the conditions for opening the free plan.

The Acceptable Use and Abuse Policy (v1.0) sets a target of a first review within 2 business days and 5 business days for appeals: a commitment of the policy that we have not measured yet and that must be met before the service opens. See also the Privacy Policy on report data.

5 reports per IP per hour, 300 per hour overall, a 16 KB maximum body and a honeypot field for bots. The same IP reporting the same link counts once. The IP is stored as a keyed hash (HMAC), not in the clear.

If there is immediate risk to a person, also report it to the affected service and to the authorities in your country: this form is not an emergency channel.